Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

GitHub CLI tokens leak via `gh attestation` commands

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability

GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

GitHub CLI: Unescaped variable components in request URLs could allow path traversal

GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

GitHub CLI: Partial token disclosure in `gh auth status` output

GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching