https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:00:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-359170 EUVD-2026-359170 https://cve.radiocsirt.org/vuln/euvd-2026-359170 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72924 <p>GitHub CLI (gh) is GitHub&#39;s official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user&#39;s non-loopback local IP addresses by other hosts that can route to the user&#39;s machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user&#39;s local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim&#39;s machine while forwarding is active. This issue is fixed in version 2.98.0.</p> <p>GitHub CLI (gh) is GitHub&#39;s official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user&#39;s non-loopback local IP addresses by other hosts that can route to the user&#39;s machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user&#39;s local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim&#39;s machine while forwarding is active. This issue is fixed in version 2.98.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72924 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72924 msrc_CVE-2026-72924 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72924 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72924 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh</p> <p>GitHub CLI (gh) is GitHub&#39;s official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user&#39;s non-loopback local IP addresses by other hosts that can route to the user&#39;s machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user&#39;s local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim&#39;s machine while forwarding is active. This issue is fixed in version 2.98.0.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gh, Ubuntu:Pro:24.04:LTS: gh, Ubuntu:Pro:26.04:LTS: gh</p> <p>GitHub CLI (gh) is GitHub&#39;s official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user&#39;s non-loopback local IP addresses by other hosts that can route to the user&#39;s machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user&#39;s local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim&#39;s machine while forwarding is active. This issue is fixed in version 2.98.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72924