Skip to content
OpenAdvisories

Weakness (CWE)

CWE-501: Trust Boundary Violation

Class Draft

The product mixes trusted and untrusted data in the same data structure or structured message.

Source: MITRE CWE-501

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.6
    CVE-2025-48938

    Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

    go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on …

    cli go-gh golang-github-cli-go-gh-v2 github.com/cli/go-gh/v2 Debian Ubuntu Go