Vulnerability in Cli

CVE-2026-64655

GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify  builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow  flag values without escaping regex metach…

Affected products

  • Cli — versions < 2.97.0

Weakness classification (CWE)

References