gh Info

gh was added to epel10 repo on 2025-07-30
Page updated: 2026-02-06 01:24
Repo Status - Overall Status

Source NVR: gh-2.86.0-2.el10_2 (2025-07-30)

Binary Packages

gh gh-2.86.0-2.el10_2

Bugs

2432189 NEW CVE-2026-23831 gh: Rekor denial of service [epel-10]
2433098 NEW CVE-2026-23991 gh: go-tuf client DoS via malformed server response [epel-10]
2433100 NEW CVE-2026-23992 gh: go-tuf improperly validates the configured threshold for delegations [epel-10]
2433529 NEW CVE-2026-24117 gh: Rekor Server-Side Request Forgery (SSRF) [epel-10]
2433566 NEW CVE-2026-24137 gh: sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal [epel-10]
2434243 NEW CVE-2026-24686 gh: go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names [epel-10]

Install Failures