go-gh vulnerabilities

CVEs whose affected-version data names the go-gh package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-48938Critical· 9.8

1y ago

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing …

▾ Midnightcli · go-ghEPSS 0.53%via NVD