pkg:Go/github.com/cli/cli

All known vulnerabilities

• HIGH8.0CVE-2024-52308Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
  from 0
• HIGH8.0CVE-2024-52308Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
  from 0, < 2.62.0
• MEDIUM6.5CVE-2024-53858Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli
  from 0
• MEDIUM6.3`gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli
  from 0
• LOW3.5GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection
  >= 1.6.0, <= 1.14.0
• —Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli
  from 0
• —Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli
  from 0, <= 1.14.0