#terminal-injection

A dark comparison-matrix style cover reading gh CLI 2.97.0: Terminal Injection Fix, badged GHSA-3m3g-3wcr-px46 fixed 2026-07-31, listing the seven affected commands: gh gist view (truncated files), gh api (non-JSON responses), gh pr diff, gh release download --output -, gh codespace logs, gh skills preview, and gh agent-task view / create

gh CLI 2.97.0 Fixes Terminal Injection in 7 Commands

GitHub CLI (gh) 2.97.0 fixes a terminal escape-sequence injection bug (GHSA-3m3g-3wcr-px46) across gh api, gh pr diff, and 5 more commands. Update now.

Aug 19, 2026Read more →