{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gh","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NV3P9PSN4DWQ0DZWC9K2Z6","modified_at":"2026-10-01T03:03:33.872121573Z","published_at":"2026-08-25T21:17:45.030Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-72924","https://security-tracker.debian.org/tracker/CVE-2026-72924"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-72924","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-72924"}],"summary":"GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. Whi"}