[ Vendor · 3 CVEs ]
cli
CVEs affecting cli published in the last 30 days, plus any cli CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-64655 | 6 Aug 2026 | CVSS 2.1 | GitHub CLI allows attestation verification bypass through unescaped regex metacharactersGitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name… | Fix |
| CVE-2026-64653 | 6 Aug 2026 | CVSS 5.1 | GitHub CLI allows path traversal through unescaped request URL componentsGitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent… | Fix |
| CVE-2026-64652 | 6 Aug 2026 | CVSS 3.3 | GitHub CLI partially discloses authentication tokens in `gh auth status` outputGitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore… | Fix |