low3.2
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.
Impact
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.
Affected products
| Product | Affected versions |
|---|---|
| Gh Package | before 1.5.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.