VDB
GO-2024-3296
GO-2024-3296
PUBLISHED
Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | cli/cli/v2 | 0, 0 |
| github.com | cli/cli | 0, 0 |
Timeline
- Dec 2, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 1, 2026 Security Advisory