Skip to content
OpenAdvisories

Package · Go

github.com/cli/go-gh/v2

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.6

    Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

    go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on …