https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:51:48.029014+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336188 EUVD-2026-336188 2026-10-03T08:51:48.113681+00:00 EUVD-2026-336188 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59831 fkie_cve-2026-59831 2026-10-03T08:51:48.113719+00:00

GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-59831 msrc_CVE-2026-59831 — GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace 2026-10-03T08:51:48.113755+00:00 msrc_CVE-2026-59831 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59831 UBUNTU-CVE-2026-59831 2026-10-03T08:51:48.113775+00:00

Affected: Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh

GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.