Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:23:15 +0000 EUVD-2026-349304 https://cve.radiocsirt.org/vuln/euvd-2026-349304 EUVD-2026-349304 https://cve.radiocsirt.org/vuln/euvd-2026-349304 fkie_cve-2026-64653 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64653 <p>GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0.</p> <p>GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-64653 msrc_CVE-2026-64653 — GitHub CLI: Unescaped variable components in request URLs could allow path traversal https://cve.radiocsirt.org/vuln/msrc_cve-2026-64653 msrc_CVE-2026-64653 https://cve.radiocsirt.org/vuln/msrc_cve-2026-64653 openSUSE-SU-2026:11530-1 — gh-2.97.0-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2026:11530-1 <p>gh-2.97.0-1.1 on GA media</p> <p>gh-2.97.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11530-1 UBUNTU-CVE-2026-64653 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-64653 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh</p> <p>GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh</p> <p>GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-64653