PatchTheCVEcli vulnerabilities
Recent CVEs affecting cli products. 2 tracked.
cli has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-05-30. Highest priority: CVE-2025-48938 (score 51/100).
- CVE-2025-48938 CRITICAL 9.8 UPGRADE go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier
- CVE-2024-53859 MEDIUM 6.5 UPGRADE go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line
FAQ
How do I fix cli vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cli being exploited right now?
None of the tracked cli CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cli CVE should I patch first?
CVE-2025-48938 currently ranks highest (51/100): go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier.