MEDIUM6.5Go
GHSA-55v3-xh23-96gh· CVE-2024-53859, GO-2024-3295`auth.TokenForHost` violates GitHub host security boundary when sourcing authentication token within a codespace
Modified: 9/10/2026
package
pkg:go/github.com/cli/go-gh/v2
`auth.TokenForHost` violates GitHub host security boundary when sourcing authentication token within a codespace
Modified: 9/10/2026
Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server
Modified: 9/10/2026
Violation of GitHub host security boundary when sourcing authentication token within a codespace in github.com/cli/go-gh
Modified: 2/4/2026
GitHub CLI and extensions can execute arbitrary commands on compromised GitHub Enterprise Server in github.com/cli/go-gh
Modified: 2/4/2026