CVE-2024-53859

go-gh is a Go module for interacting with the "gh" utility and the GitHub API from the command line. A security vulnerability has been identified in "go-gh" that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. "go-gh" sources authentication...

CVE-2024-53859: Exposure of Sensitive Information to an Unauthorized Actor

go-gh is a Go module for interacting with the gh utility and the GitHub API from the command line. A security vulnerability has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. go-gh sources authentication tokens...