CL
Product
cli
12
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 6Low 4
Watch
Add cli to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45803 | 3.5 | May 15 | gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection Affected: >= 1.6.0, < 2.92.0 |
| CVE-2026-64652 | 3.3 | Aug 6 | GitHub CLI: Partial token disclosure in `gh auth status` output Affected: < 2.97.0 |
| CVE-2026-72924 | 2.1 | Aug 25 | GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default Affected: >= 2.28.0, < 2.98.0 |
| CVE-2026-64655 | 2.1 | Aug 6 | GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching Affected: < 2.97.0 |
Showing 4