Skip to content
OpenAdvisories

Package · Go

github.com/cli/go-gh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-53859

    go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace

    go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line. A security vulnerability has been identified in `go-gh` that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a code…

    cli go-gh golang-github-cli-go-gh-v2 golang-github-cli-go-gh-v2 Debian Ubuntu Go