CVE-2025-54956: R-Lib Gh

Low severity, CVSS 3.2. EPSS: 0.1% chance of exploitation in the next 30 days.

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.

Affected products

• R-Lib Gh: before 1.5.0 (fixed in 1.5.0)

Published 2025-08-03. Last modified 2026-06-17.