`gh attestation verify` returns incorrect exit code during verification if no attestations are present

Summary A bug in GitHub's Artifact Attestation CLI tool, gh attestation verify, may return an incorrect zero exit status when no matching attestations are found for the specified --predicate-type or the default https://slsa.dev/provenance/v1 if not specified. This issue only arises if an artifact...

CVE-2025-26156

creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2025-25204

The CVE-2025-25204 issue affects GitHub CLI (gh) where, in versions 2.49.0 through 2.66.x, a bug in the Artifact Attestation tool gh attestation verify causes a zero exit status when no attestations are present. This incorrect exit code can enable attackers to deploy malicious artifacts in enviro...

CVE-2025-25745

creationtimestamp| type| source ---|---|--- 2025-02-14 16:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyyhvgd2e 2025-02-14 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114003261336817886 2025-02-14 19:35:00+00:00| seen|...

CVE-2025-25304

creationtimestamp| type| source ---|---|--- 2025-02-14 16:10:32+00:00| published-proof-of-concept| https://github.com/vega/vega/security/advisories/GHSA-mp7w-mhcv-673j 2025-02-14 19:34:33+00:00| seen| https://infosec.exchange/users/cve/statuses/114003913828136574 2025-02-14 20:16:06+00:00| seen|...

CVE-2025-24566

creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2isyfz2c 2025-02-14 15:38:52+00:00| seen| https://infosec.exchange/users/cve/statuses/114002987038424383 2025-02-14 15:45:48+00:00| seen|...

CVE-2025-24564

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2e3iqz2c 2025-02-14 15:23:51+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928023557735 2025-02-14 15:45:41+00:00| seen|...

CVE-2025-23853

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzy5mys2s 2025-02-14 15:08:50+00:00| seen| https://infosec.exchange/users/cve/statuses/114002868946616253...

CVE-2025-23786

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzirf6m2i 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750893462072...

CVE-2025-23771

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzg3cez24 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750878299039...

CVE-2025-23748

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bz4l7i22h 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691828525768...

CVE-2025-23658

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byx3ff32s 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691796716568...

CVE-2025-23651

creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bykn3ms2s 2025-02-14 13:53:46+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573752176857...

CVE-2025-23648

creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byel4sr24 2025-02-14 13:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573723086543...

CVE-2025-23647

creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bychhdk2h 2025-02-14 13:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573709075439...

CVE-2024-5119

creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:59+00:00| seen| Telegram/e4UdCvJdz8sgcZEogcNn3WoEP6J9-lk4JuqUDnmlSoGcaSoP...

SUSE CVE-2024-8927

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, HTTPREDIRECTSTATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP...

CVE-2024-57778

An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200...