PT-2026-118064

GitHub CLI allows path traversal through unescaped request URL components in github.com/cli/cli...

GHSA-4FJG-2H4Q-FWG3 GitHub CLI allows path traversal through unescaped request URL components

Summary A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components. A value containing URL path metacharacters can alter the request path and cause gh to addre...

GitHub CLI allows path traversal through unescaped request URL components

Summary A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components. A value containing URL path metacharacters can alter the request path and cause gh to addre...