GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

概要

参考情報

• cli/cli security advisory · ADVISORY

github.com/cli/cli のその他の脆弱性

• CVE-2026-64655低 2.1GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify  builds the certificate Subject Alternative N…
• CVE-2026-64653中 5.1GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without…
• CVE-2026-64652低 3.3GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last un…
• CVE-2026-48501緊急 9.1GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API request…
• CVE-2026-45803低 3.5`gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that co…