package

Go/github.com/cli/go-gh/v2

pkg:go/github.com/cli/go-gh/v2

MEDIUM6.5Go

`auth.TokenForHost` violates GitHub host security boundary when sourcing authentication token within a codespace

Modified: 9/10/2026

MEDIUMGo

Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

Modified: 9/10/2026

—Go

Violation of GitHub host security boundary when sourcing authentication token within a codespace in github.com/cli/go-gh

Modified: 2/4/2026

—Go

GitHub CLI and extensions can execute arbitrary commands on compromised GitHub Enterprise Server in github.com/cli/go-gh

Modified: 2/4/2026