Low severity3.2NVD Advisory· Published Aug 3, 2025· Updated Apr 15, 2026
CVE-2025-54956
CVE-2025-54956
Description
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.
Patches
26e5d3dc66540https://github.com/r-lib/ghvia osv
b575d488c713https://github.com/r-lib/ghvia osv
Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
4News mentions
0No linked articles in our index yet.