Github.Com Cli Cli vulnerabilities

CVE-2024-54132 [MEDIUM] CWE-22 Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability ### Summary A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through `gh run download`. ### Details This vulnerability stems from a GitHu

CVE-2024-52308 [HIGH] CWE-77 Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer ### Summary A security vulnerability has been identified in GitHub CLI that could allow remote code execution (RCE) when users connect to a malicious Codespace SSH server and use the `gh codespace ssh` or `gh codespace logs` commands. ### Details The vulnerability