Skip to content
OpenAdvisories

Package · Ubuntu

gh

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2024-52308

    Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

    The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote cod…

    cli cli gh gh Debian Ubuntu Azure Linux Wolfi Go