#codespaces

A terminal-style cover showing gh --version reporting the vulnerable 2.95.0 release, a GHSA-8cg3-r6g9-fpg2 / CVE-2026-59831 warning for the gh codespace jupyter remote code execution bug, then brew upgrade gh updating to the patched 2.96.0 release

Update gh CLI Now: Codespace Jupyter RCE Fixed

A malicious Codespace could use gh codespace jupyter to hand VS Code a vscode:// URL and run commands on your machine. Fixed in gh CLI v2.96.0.

Aug 19, 2026Read more →