34894 matches found
PT-2026-68765
Name of the Vulnerable Software and Affected Versions GitHub CLI versions prior to 2.97.0 Description Multiple commands in the GitHub CLI print content from gists, APIs, pull requests, releases, codespaces, skills, or agent-tasks without neutralizing terminal escape sequences. Terminal escape...
CVE-2026-64653: Improper Limitation of a Pathname to a Restricted Directory
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-64652: Insertion of Sensitive Information Into Sent Data
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
CVE-2026-64655: Incorrect Regular Expression
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
CVE-2026-64654: Improper Neutralization of Escape, Meta, or Control Sequences
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
PT-2026-68766
Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions prior to 2.97.0 Description The gh attestation verify command fails to escape regex metacharacters when building the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values...
CVE-2026-71313
creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:14+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-7p4m-qxvv-g567 2026-08-06 06:31:10+00:00| seen| https://gist.github.com/alon710/49b7a81d033518d9857d9b26baae89fd...
Missing Authorization
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
GHSA-HXCR-HM88-MPQ6
creationtimestamp| type| source ---|---|--- 2026-08-05 21:31:30+00:00| seen| https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95...
CVE-2026-15996
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...
GHSA-H663-9FGH-W7XF vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby3.4-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch...
GHSA-JVQ6-G9P8-PJJW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P4J8-JW78-GVC8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XGPF-25JC-XVGF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H989-9WH8-QQ8F vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R448-82MR-7599 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W6MP-47PM-392W vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-HHV2-WCCR-HR37 vulnerabilities
Vulnerabilities for packages: chromium...