Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

spack

gh

spack

GitHub's official command line tool.

View on github.com · View on spack.io

Security Advisories for gh in spack

Potential
Moderate
over 1 year ago

`gh attestation verify` returns incorrect exit code during verification if no attestations are present GSA_kwCzR0hTQS1mZ3c0LXY5ODMtbWdwOM4ABEfl

go github.com/cli/cli/v2
Potential
Moderate
over 1 year ago

Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability GSA_kwCzR0hTQS0ybTloLXI1N2ctNDVwas4ABCDS

go github.com/cli/cli, github.com/cli/cli/v2
Potential
Moderate
over 1 year ago

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts GSA_kwCzR0hTQS1qd2NtLTlnMzktcG1jd84ABB4c

go github.com/cli/cli/v2
Potential
High
almost 2 years ago

Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer GSA_kwCzR0hTQS1wMmgyLTN2ZzktNHA4N84ABBW1

go github.com/cli/cli/v2
Potential
Moderate
over 4 years ago

GitHub CLI can execute a git binary from the current directory MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxZmgtNzc4bS0ydjMy

go github.com/cli/cli

Filter by Severity

Moderate 4 High 1