Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability

GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

GitHub CLI: Unescaped variable components in request URLs could allow path traversal

GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace