Skip to content
Threat Feed
Subscribe

Product

GitHub CLI

3 briefs RSS
high advisory

Detection of Multi-Cloud CLI Token and Credential Harvesting

Threat actors harvest cloud and container platform authentication tokens by abusing legitimate CLI utilities to output secrets to standard streams, which can be detected via anomalous multi-provider access patterns.

Google Cloud SDK +6 credential-access cloud-security supply-chain
2t updated
medium advisory

GitHub CLI Partial Authentication Token Disclosure

GitHub CLI contains an information exposure vulnerability in the gh auth status command that results in the partial disclosure of authentication tokens.

GitHub CLI vulnerability cli github
1c
low advisory

GitHub CLI `gh codespace jupyter` Command Remote Code Execution Vulnerability

A remote code execution vulnerability, CVE-2026-59831, has been identified in the GitHub CLI's `gh codespace jupyter` command, allowing attackers to execute arbitrary code on a user's system when connecting to a specially crafted malicious Codespace.

GitHub CLI +1 remote-code-execution vulnerability github cli codespaces developer-tools
1t 1c