Go/github.com/cli/go-gh/v2 CVE-2025-48938: medium, EPSS 0.54%
Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server
Action: Upgrade github.com/cli/go-gh/v2 to 2.12.1 or later.
go get github.com/cli/go-gh/v2@v2.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.12.1 | - |
Fixed versions
| 2.12.1 |
Sources
- osv: GHSA-g9f5-x53j-h563
- https://github.com/cli/go-gh/security/advisories/GHSA-g9f5-x53j-h563
- https://nvd.nist.gov/vuln/detail/CVE-2025-48938
- https://github.com/cli/go-gh/commit/a08820a13f257d6c5b4cb86d37db559ec6d14577
- https://github.com/cli/go-gh
CVE-2025-48938 · published · modified · JSON