34887 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding,...
Linux Distros Unpatched Vulnerability : CVE-2026-64654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull reques...
Linux Distros Unpatched Vulnerability : CVE-2026-64655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the...
CVE-2026-71430
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:12+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-8hcv-x26h-mcgp 2026-08-07 06:34:35+00:00| seen| https://gist.github.com/alon710/455dd27ab1381c77c49e252fb102cb9f 2026-10-04 00:58:54+00:00|...
CVE-2026-71498
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:09+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-j4r3-hg7j-8chg 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...
CVE-2026-56381
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g3hp-vvqf-8vw6...
CVE-2026-56393
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4mgv-366x-qxvx...
AZL-95462 CVE-2026-64654 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
DEBIAN-CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
AZL-95465 CVE-2026-64653 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
AZL-95472 CVE-2026-64655 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
DEBIAN-CVE-2026-64655
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
CVE-2026-64655
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
DEBIAN-CVE-2026-64652
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
CVE-2026-64652
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
CVE-2026-64654
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
AZL-95468 CVE-2026-64652 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-64652
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...