GO-2022-0395: GitHub CLI can execute a git binary from the current… · Watchpost

← All vulnerabilities

GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

GHSA-fqfh-778m-2v32 · GO-2022-0395 · Published 21/08/2024 · updated 03/03/2026

In short

GO-2022-0395 is a not yet rated vulnerability affecting github.com/cli/cli.
Fix: update to 1.2.1 or later.

Package	Affected versions	Patched versions
github.com/cli/cli Go	`< 1.2.1`	`1.2.1`

Description

GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

References

cli/cli security advisory · ADVISORY

More vulnerabilities in github.com/cli/cli

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free