VYPR

Go Gh

by CLI

CVEs (2)

  • CVE-2025-48938CriMay 30, 2025
    risk 0.57cvss 9.8epss 0.00

    go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by…

  • CVE-2024-53859MedNov 27, 2024
    risk 0.42cvss 6.5epss 0.01

    go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line. A security vulnerability has been identified in `go-gh` that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. `go-gh`…