Shelbyc

**Name of the Vulnerable Software and Affected Versions** GitHub CLI (gh) versions 2.28.0 through 2.97.0 **Description** The local listener created by the `gh codespace ports forward` command binds to all available network interfaces by default. This allows services within a Codespace to be accessible via the user's non-loopback local IP addresses to other hosts capable of routing to the user's machine, regardless of whether the source Codespaces port is set to private. Exploitation requires a network-adjacent attacker to access the victim's machine while port forwarding is active. **Recommendations** Update to version 2.98.0.