Vulnerability Report: GO-2024-3269
- CVE-2024-52308, GHSA-p2h2-3vg9-4p87
- Affects: github.com/cli/cli, github.com/cli/cli/v2
- Published: Nov 19, 2024
Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
For detailed information about this vulnerability, visit https://github.com/cli/cli/security/advisories/GHSA-p2h2-3vg9-4p87 or https://nvd.nist.gov/vuln/detail/CVE-2024-52308.
Affected Packages
-
PathVersionsSymbols
Aliases
References
- https://github.com/cli/cli/security/advisories/GHSA-p2h2-3vg9-4p87
- https://nvd.nist.gov/vuln/detail/CVE-2024-52308
- https://vuln.go.dev/ID/GO-2024-3269.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.