VDB
GO-2024-3296
GO-2024-3296
PUBLISHED
Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | cli/cli/v2 | 0 |
| chainguard | gh | 0 |
| github.com | cli/cli | 0 |
| wolfi | gh | 0 |
Timeline
- Dec 2, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 18, 2026 Security Advisory