426 matches found
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh, cosign-fips...
GO-2024-3310 vulnerabilities
Vulnerabilities for packages: gh...
GO-2025-3467 vulnerabilities
Vulnerabilities for packages: gh...
GO-2024-3296 vulnerabilities
Vulnerabilities for packages: gh...
GO-2024-3295 vulnerabilities
Vulnerabilities for packages: wolfictl, gh...
GO-2024-3269 vulnerabilities
Vulnerabilities for packages: gh...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: slsa-verifier, cosign, gh...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, vexctl, gitsign, buildkitd, spire-server, falcoctl, goreleaser, trivy,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, aactl, spire-server, falcoctl, goreleaser,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, slsa-verifier, buildkitd, aactl,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, rekor, tflint, sigstore-scaffolding, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: flux-source-controller, tekton-chains, zarf, policy-controller, flux-image-automation-controller, bank-vaults, src-fingerprint, crossplane-provider-azure, tkn, crossplane-provider-azure-managedidentity, terraform, step-ca, k3d, neuvector-sigstore-interface, kubescape...
GHSA-MXCG-P696-RM94
creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...
CVE-2026-59831 affecting package gh for versions less than 2.62.0-20
CVE-2026-59831 affecting package gh for versions less than 2.62.0-20. A patched version of the package is available...
CVE-2026-64652
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
DEBIAN-CVE-2026-64654
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
CVE-2026-64652 GitHub CLI: Partial token disclosure in `gh auth status` output
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
Fedora 44 : gh (2026-4e77362489)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4e77362489 advisory. Update to 2.97.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...