go-gh vulnerabilities

2 known vulnerabilities in go-gh from Cli. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  go-gh: Trust Boundary Violation

  CVE-2025-48938May 30, 2025Cli

  go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a

• 7.5 High severity

  go-gh: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-53859Nov 27, 2024Cli

  go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line. A security vulnerability has been identified in `go-gh` that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codes