Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Github
Cli

GitHub cli Vulnerabilities: CVEs, CISA KEV & Security Advisories

3 CVEs

GitHub cli Vulnerabilities

CVE security advisories and vulnerability history for cli by GitHub.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

With known exploit

6.0

Avg CVSS

2024–2026

Last updated May 15, 2026

Overview

GitHub cli has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting GitHub cli, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of GitHub cli's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of GitHub cli's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of GitHub cli's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every GitHub cli version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

> 2.6.11 CVE
2.62.01 CVE
2.63.01 CVE
2.92.01 CVE

Find a version

3 CVEs

Sort

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection
CVE-2026-45803
Public exploit
Patch
CWE-150
Low · CVSS 3.5
EPSS 0.0% (10th pct)2026-05-15
Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli
CVE-2024-53858
Patch
CWE-200
Medium · CVSS 6.5
EPSS 0.1% (17th pct)2024-11-27
High vulnerability · 2024-11-14
CVE-2024-52308
Patch
CWE-77
High · CVSS 8.0
EPSS 7.5% (92th pct)2024-11-14

Common weakness types

The CWE weakness categories most often found in GitHub cli CVEs. Follow any weakness for its full explanation.

CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVE
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVE
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVE

Disclosure activity by year

How many GitHub cli CVEs were published each year.

2024

2

2026

1

Other GitHub products

Browse vulnerabilities for other products by GitHub.

Enterprise Server113 CVEs GitHub Enterprise Server46 CVEs enterprise_server15 CVEs cmark-gfm11 CVEs github10 CVEs codeql-action2 CVEs copilot-cli2 CVEs @github/copilot2 CVEs

All GitHub vulnerabilities

Frequently asked questions

Common questions about GitHub cli vulnerabilities.

How many CVEs does GitHub cli have?

GitHub cli has 3 published CVE records since 2024.

How many GitHub cli CVEs are in CISA KEV?

None of GitHub cli's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for GitHub cli vulnerabilities?

Yes — 1 of GitHub cli's CVEs have a known public exploit.

Which versions of GitHub cli are affected?

4 distinct GitHub cli versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in GitHub cli CVEs?

GitHub cli's CVEs most often map to these CWE weakness types: CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

What is the average severity of GitHub cli CVEs?

The average CVSS base score across GitHub cli's scored CVEs is 6.0.

References

All GitHub vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track GitHub cli vulnerabilities

Monitor new GitHub cli vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References