27550 matches found
CVE-2025-25204
gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...
`gh attestation verify` returns incorrect exit code during verification if no attestations are present
Summary A bug in GitHub's Artifact Attestation CLI tool, gh attestation verify, may return an incorrect zero exit status when no matching attestations are found for the specified --predicate-type or the default https://slsa.dev/provenance/v1 if not specified. This issue only arises if an artifact...
CVE-2025-26156
creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...
CVE-2025-25204
gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...
CVE-2025-25204
"gh" is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool "gh attestation verify" causes it to return a zero exit status when no attestations are present. This behavior is incorrec...
CVE-2025-25204
The CVE-2025-25204 issue affects GitHub CLI (gh) where, in versions 2.49.0 through 2.66.x, a bug in the Artifact Attestation tool gh attestation verify causes a zero exit status when no attestations are present. This incorrect exit code can enable attackers to deploy malicious artifacts in enviro...
CVE-2025-25204
gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...
CVE-2025-25745
creationtimestamp| type| source ---|---|--- 2025-02-14 16:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyyhvgd2e 2025-02-14 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114003261336817886 2025-02-14 19:35:00+00:00| seen|...
CVE-2025-25304
creationtimestamp| type| source ---|---|--- 2025-02-14 16:10:32+00:00| published-proof-of-concept| https://github.com/vega/vega/security/advisories/GHSA-mp7w-mhcv-673j 2025-02-14 19:34:33+00:00| seen| https://infosec.exchange/users/cve/statuses/114003913828136574 2025-02-14 20:16:06+00:00| seen|...
CVE-2025-24566
creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2isyfz2c 2025-02-14 15:38:52+00:00| seen| https://infosec.exchange/users/cve/statuses/114002987038424383 2025-02-14 15:45:48+00:00| seen|...
CVE-2025-24564
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2e3iqz2c 2025-02-14 15:23:51+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928023557735 2025-02-14 15:45:41+00:00| seen|...
CVE-2025-23853
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzy5mys2s 2025-02-14 15:08:50+00:00| seen| https://infosec.exchange/users/cve/statuses/114002868946616253...
CVE-2025-23786
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzirf6m2i 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750893462072...
CVE-2025-23771
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzg3cez24 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750878299039...
CVE-2025-23748
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bz4l7i22h 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691828525768...
CVE-2025-23658
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byx3ff32s 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691796716568...
CVE-2025-23651
creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bykn3ms2s 2025-02-14 13:53:46+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573752176857...
CVE-2025-23648
creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byel4sr24 2025-02-14 13:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573723086543...
CVE-2025-23647
creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bychhdk2h 2025-02-14 13:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573709075439...