Vulnerability GO-2026-6765
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
GitHub CLI allows path traversal through unescaped request URL components in github.com/cli/cli
v0.4.0 - v1.14.0
v0.4.0 - v1.14.0
Summary
GitHub CLI allows path traversal through unescaped request URL components in github.com/cli/cli
Details
GitHub CLI allows path traversal through unescaped request URL components in github.com/cli/cli
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli
v2.0.0 - v2.96.0 GO-2026-6766
v2.0.0 - v2.96.0 GO-2026-6766
Unknown
5 hours ago
GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli
v2.0.0 - v2.96.0 GO-2026-6766
v2.0.0 - v2.96.0 GO-2026-6766
Unknown
5 hours ago
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters in github.com/cli/cli
v2.0.0 - v2.96.0 GO-2026-6767
v2.0.0 - v2.96.0 GO-2026-6767
Unknown
5 hours ago
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters in github.com/cli/cli
v2.0.0 - v2.96.0 GO-2026-6767
v2.0.0 - v2.96.0 GO-2026-6767
Low Risk
4 days ago
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters
v2.0.0 - v2.96.0 GHSA-mm27-mwq9-fr5g
v2.0.0 - v2.96.0 GHSA-mm27-mwq9-fr5g
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.97.0)
2 months ago
July 31, 2026 at 01:38 AM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC