Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:11:25 +0000 EUVD-2026-336188 https://cve.radiocsirt.org/vuln/euvd-2026-336188 EUVD-2026-336188 https://cve.radiocsirt.org/vuln/euvd-2026-336188 fkie_cve-2026-59831 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59831 <p>GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.</p> <p>GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59831 msrc_CVE-2026-59831 — GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace https://cve.radiocsirt.org/vuln/msrc_cve-2026-59831 msrc_CVE-2026-59831 https://cve.radiocsirt.org/vuln/msrc_cve-2026-59831 UBUNTU-CVE-2026-59831 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59831 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh</p> <p>GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh</p> <p>GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59831