cli go-gh

• CVE-2025-48938 Low 2.6 Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server 0.6%
• CVE-2024-53859 Medium 6.5 go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace 0.5%