CVE-2026-64655: GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Aug
Released
2026-08-11
EPSS Score
0.33% (percentile: 25.4%)

Affected Products (1)

Open Source Software

  • azl3 gh 2.62.0-20 on Azure Linux 3.0

Revision History

  • 2026-08-11: Information published.