pkg:Go/github.com/cli/cli

7 total CVEsHIGH2MEDIUM2LOW1

✅ Check your installed version

All known vulnerabilities

  • HIGH8.0CVE-2024-52308Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
    from 0
  • HIGH8.0CVE-2024-52308Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
    from 0, < 2.62.0
  • MEDIUM6.5CVE-2024-53858Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli
    from 0
  • MEDIUM6.3CVE-2025-25204`gh attestation verify` returns incorrect exit code during verification if no attestations are present
    from 0
  • LOW3.5CVE-2026-45803GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection
    >= 1.6.0, <= 1.14.0
  • —CVE-2024-54132Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli
    from 0
  • —CVE-2024-54132Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli
    from 0, <= 1.14.0