426 matches found
CVE-2025-25204 vulnerabilities
Vulnerabilities for packages: gh...
CVE-2025-25204 vulnerabilities
Vulnerabilities for packages: gh...
AZL-56885 CVE-2025-25204 affecting package gh for versions less than 2.62.0-6
gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...
go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace
...
CVE-2024-53858 affecting package gh for versions less than 2.62.0-5
CVE-2024-53858 affecting package gh for versions less than 2.62.0-5. A patched version of the package is available...
Security update for gh (important)
openSUSE Security Update: Security update for gh Announcement ID: openSUSE-SU-2025:0021-1 Rating: important References: 1233387 Cross-References: CVE-2024-52308 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update for g...
CVE-2024-45338 affecting package gh for versions less than 2.62.0-4
CVE-2024-45338 affecting package gh for versions less than 2.62.0-4. A patched version of the package is available...
CVE-2024-45337 affecting package gh for versions less than 2.62.0-3
CVE-2024-45337 affecting package gh for versions less than 2.62.0-3. A patched version of the package is available...
CVE-2024-45338 affecting package gh for versions less than 2.13.0-24
CVE-2024-45338 affecting package gh for versions less than 2.13.0-24. A patched version of the package is available...
CVE-2024-54132 affecting package gh for versions less than 2.13.0-23
CVE-2024-54132 affecting package gh for versions less than 2.13.0-23. A patched version of the package is available...
AZL-54419 CVE-2024-45338 affecting package gh for versions less than 2.62.0-5
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
AZL-54540 CVE-2024-45338 affecting package gh for versions less than 2.13.0-24
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
CVE-2024-54132 affecting package gh for versions less than 2.62.0-2
CVE-2024-54132 affecting package gh for versions less than 2.62.0-2. A patched version of the package is available...
GO-2024-3295 Violation of GitHub host security boundary when sourcing authentication token within a codespace in github.com/cli/go-gh
Violation of GitHub host security boundary when sourcing authentication token within a codespace in github.com/cli/go-gh...
CVE-2024-53859 affecting package gh for versions less than 2.62.0-1
CVE-2024-53859 affecting package gh for versions less than 2.62.0-1. A patched version of the package is available...
CVE-2024-24786 affecting package gh for versions less than 2.62.0-1
CVE-2024-24786 affecting package gh for versions less than 2.62.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-45288 affecting package gh for versions less than 2.62.0-1
CVE-2023-45288 affecting package gh for versions less than 2.62.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-52308 affecting package gh for versions less than 2.62.0-1
CVE-2024-52308 affecting package gh for versions less than 2.62.0-1. An upgraded version of the package is available that resolves this issue...