{"id":"GO-2026-6766","revision":"94cabe9e93ee45c4a0baaa1811754344","records":[{"revision":"94cabe9e93ee45c4a0baaa1811754344","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6766","aliases":["CVE-2026-64652","GHSA-cg6r-mpgc-h9mm"],"title":"GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli","description":"GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:37.8135888+00:00","affected":[{"ecosystem":"Go","name":"github.com/cli/cli","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/cli/cli/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.97.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/cli/cli/security/advisories/GHSA-cg6r-mpgc-h9mm","https://nvd.nist.gov/vuln/detail/CVE-2026-64652","https://github.com/cli/cli/commit/3f6a16a9f8c7fe9676aa8d8f47b399310dd231c3","https://github.com/cli/cli/releases/tag/v2.97.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6766","license":"OSV · upstream source license applies","key":"osv:GO-2026-6766","identifiers":["GO-2026-6766","CVE-2026-64652","GHSA-cg6r-mpgc-h9mm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}