CVE-2026-23992 affecting package gh for versions less than 2.62.0-13

CVE-2026-23992 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-11065 affecting package gh for versions less than 2.62.0-13

CVE-2025-11065 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

Fedora 42 : gh (2026-de52e7caa1)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-de52e7caa1 advisory. Update to 2.87.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : gh (2026-21a2f3709a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-21a2f3709a advisory. Update to 2.87.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Ubuntu: Security Advisory (USN-8012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-76958 CVE-2025-58190 affecting package gh for versions less than 2.62.0-13

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76955 CVE-2025-47911 affecting package gh for versions less than 2.62.0-13

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76863 CVE-2025-47911 affecting package gh for versions less than 2.13.0-26

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: ko, gitsign, tkn, trivy, zarf, buildkitd, zot, policy-controller, skaffold, kubescape, flux-source-controller, gh, aactl, spire-server, witness, tekton-chains, slsa-verifier, goreleaser, ratify, kyverno-notation-aws, neuvector-sigstore-interface, tflint, vexctl,...

GHSA-273P-M2CW-6833 vulnerabilities

Vulnerabilities for packages: ko, gitsign, tkn, trivy, zarf, buildkitd, zot, policy-controller, skaffold, kubescape, flux-source-controller, gh, aactl, spire-server, witness, tekton-chains, slsa-verifier, goreleaser, ratify, kyverno-notation-aws, neuvector-sigstore-interface, tflint, vexctl,...

CVE-2026-24137 vulnerabilities

Vulnerabilities for packages: ko, gitsign, sigstore-scaffolding, undock, fulcio, tkn, trivy, zarf, buildkitd, zot, policy-controller, skaffold, falco-no-driver, kubescape, flux-source-controller, gh, aactl, buildah, podman, spire-server, witness, tekton-chains, kots, slsa-verifier, docker-compose...

GHSA-4C4X-JM2X-PF9J vulnerabilities

Vulnerabilities for packages: ko, gitsign, tkn, trivy, zarf, buildkitd, zot, policy-controller, skaffold, kubescape, flux-source-controller, gh, aactl, spire-server, witness, tekton-chains, slsa-verifier, goreleaser, ratify, kyverno-notation-aws, neuvector-sigstore-interface, tflint, vexctl,...

CVE-2026-24117 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller-fips, cg, tflint, buildkitd-fips, image-factory-fips, kyverno-fips, trivy-fips, falcoctl, buildkitd, kyverno-notation-aws-fips, falcoctl-fips, gh, tkn, crossplane-fips, trivy, neuvector-sigstore-interface, ko, teleport, aactl, tkn-fips,...

GHSA-273P-M2CW-6833 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller-fips, cg, tflint, buildkitd-fips, image-factory-fips, kyverno-fips, trivy-fips, falcoctl, buildkitd, kyverno-notation-aws-fips, falcoctl-fips, gh, tkn, crossplane-fips, trivy, neuvector-sigstore-interface, ko, teleport, aactl, tkn-fips,...

GHSA-FCV2-XGW5-PQXF vulnerabilities

Vulnerabilities for packages: cosign, cg, buildkitd-fips, portieris-fips, kyverno-fips, trivy-fips, falcoctl, gh, tekton-chains, tflint-fips, kyverno-notation-aws, podman, timestamp-authority-fips, chainctl, ratify-fips, skaffold-fips, spire-server, tekton-pipelines-fips, policy-controller, fulci...

Azure Linux 3.0 Security Update: gh (CVE-2024-53859)

The version of gh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53859 advisory. - go-gh is a Go module for interacting with the gh utility and the GitHub API from the command line. A security...

Fedora: Security Advisory (FEDORA-2025-c6b2100f44)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : gh (2025-c6b2100f44)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c6b2100f44 advisory. Update to 2.83.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

CVE-2025-58183 affecting package gh for versions less than 2.62.0-10. A patched version of the package is available...

Debian: Security Advisory (DLA-4378-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...