What’s Vulnerable › Products

cli go-gh vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your cli go-gh version is affected

Latest cli go-gh vulnerabilities

• CVE-2025-48938 — Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server (CVSS 9.8)
• CVE-2024-53859 — go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace (CVSS 7.5)