Vulnerabilities matching "github.com/cli/cli" — 20 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →

Severity	Vulnerability	Package	Ecosystem	Disclosed	Fixed version
Unrated	CVE-2026-64655: GitHub CLI Attestation Verification Bypass Due to Unescaped Regex Metacharacters	`github.com/cli/cli`	Go	19 Oct 2026	No fix published
Unrated	CVE-2026-64652: GitHub CLI Authentication Token Disclosure in `gh auth status` Output	`github.com/cli/cli`	Go	19 Oct 2026	No fix published
Unrated	CVE-2026-64653: GitHub CLI Path Traversal Vulnerability	`github.com/cli/cli`	Go	19 Oct 2026	No fix published
2.1 low	CVE-2026-64655: GitHub CLI Attestation Verification Bypass via Unescaped Regex Metacharacters	`github.com/cli/cli/v2`	Go	15 Oct 2026	2.97.0
2.1 low	CVE-2026-64653: GitHub CLI Path Traversal Vulnerability	`github.com/cli/cli/v2`	Go	15 Oct 2026	2.97.0
3.3 low	CVE-2026-64652: GitHub CLI Authentication Token Exposure in `gh auth status` Output	`github.com/cli/cli/v2`	Go	15 Oct 2026	2.97.0
Unrated	CVE-2026-45803: GitHub CLI Terminal Escape Sequence Injection Vulnerability	`github.com/cli/cli`	Go	25 Jun 2026	No fix published
Unrated	CVE-2026-48501: GitHub CLI Incorrect Authorization Header Vulnerability	`github.com/cli/cli`	Go	25 Jun 2026	No fix published
7.4 high	CVE-2026-48501: GitHub CLI Token Exposure in TUF Repository API Requests	`github.com/cli/cli/v2`	Go	29 May 2026	2.93.0
3.5 low	CVE-2026-45803: GitHub CLI Terminal Escape Sequence Injection Vulnerability	`github.com/cli/cli/v2`	Go	19 May 2026	2.92.0
Unrated	Incorrect Exit Code in Attestation Verification - GitHub CLI Vulnerability	`github.com/cli/cli`	Go	03 Mar 2025	No fix published
6.3 medium	CVE-2025-25204: GitHub CLI Artifact Attestation Tool Incorrect Exit Code Vulnerability	`github.com/cli/cli/v2`	Go	14 Feb 2025	2.67.0
Unrated	CVE-2024-54132: Path Traversal Vulnerability in github.com/cli/cli Due to Malicious GitHub Actions Workflow Artifact Download	`github.com/cli/cli`	Go	04 Dec 2024	No fix published
6.3 medium	CVE-2024-54132: GitHub CLI Path Traversal Vulnerability in Artifact Download	`github.com/cli/cli/v2`	Go	04 Dec 2024	2.63.1
Unrated	CVE-2024-53858: github.com/cli/cli - Recursive Repository Cloning Leaks Authentication Tokens	`github.com/cli/cli`	Go	02 Dec 2024	No fix published
6.5 medium	CVE-2024-53858: GitHub CLI Vulnerability Leading to Token Leakage via Recursive Repository Cloning	`github.com/cli/cli/v2`	Go	27 Nov 2024	2.63.0
Unrated	CVE-2024-52308: Command Execution Vulnerability in github.com/cli/cli via Malicious Codespaces	`github.com/cli/cli`	Go	19 Nov 2024	No fix published
8.0 high	CVE-2024-52308: GitHub CLI Remote Code Execution Vulnerability via Malicious Codespaces	`github.com/cli/cli/v2`	Go	14 Nov 2024	2.62.0
Unrated	GitHub CLI - Execution of Arbitrary Git Binary from Current Directory	`github.com/cli/cli`	Go	21 Aug 2024	1.2.1
Medium	GitHub CLI - Execution of Arbitrary Git Binary	`github.com/cli/cli`	Go	11 Feb 2022	1.2.1

Subscribe to Vulert on Telegram

Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.

Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.