Advisories · Technology

cli.

Every CVE that names cli among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-72924 CVE record

CVSS 2.1 Low

GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
- cli
- Information disclosure
- CWE-1327
Not analysed yet 25 Aug 2026
CVE-2026-64654 CVE record

CVSS 5.3 Medium

GitHub CLI: Terminal escape sequence injection in multiple `gh` commands
- cli
- CWE-150
Not analysed yet 6 Aug 2026
CVE-2026-59831 CVE record

CVSS 4.4 Medium

GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
- cli
- CWE-829
Not analysed yet 9 Jul 2026