Skip to content

Product

GitHub codeql cli vulnerabilities

1 published CVE affecting GitHub codeql cli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest GitHub codeql cli CVEs

Newest publication first

  1. CVE-2024-25129 Limited data exfiltration in CodeQL CLI

    Published
    MediumCVSS 5.5 EPSS 0.77%

    The CodeQL CLI repo holds binaries for the CodeQL command line interface (CLI). Prior to version 2.16.3, an XML parser used by the CodeQL CLI to read various auxiliary files is vulnerable to an XML External Entity attack. If a vulnerable version of the CLI is used to process eith...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.