Skip to content
OpenAdvisories

Package · Go

github.com/cli/go-gh/v2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.6
    CVE-2025-48938

    Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

    go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on …

    cli go-gh golang-github-cli-go-gh-v2 github.com/cli/go-gh/v2 Debian Ubuntu Go
  • Medium 6.5
    CVE-2024-53859

    go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace

    go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line. A security vulnerability has been identified in `go-gh` that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a code…

    cli go-gh golang-github-cli-go-gh-v2 golang-github-cli-go-gh-v2 Debian Ubuntu Go