Skip to content
Threat Feed

Tag

Token Leakage

1 brief RSS
high advisory

GitHub CLI Incorrectly Includes Authorization Header in API Requests

GitHub CLI versions 2.92.0 and earlier incorrectly include authorization headers in API requests to TUF repository mirrors and external hosts when using the `gh attestation`, `gh release verify`, and `gh release verify-asset` commands, potentially exposing sensitive tokens.

cli/cli/v2 +1 github cli token leakage api
2r 1t 3i