create-bamboo (>=1.0.1, <=1.0.2) potentially affected by unknown CVE via bamboo-init (1.0.7)

bamboo-init NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on bamboo-init and may be impacted: - create-bamboo =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-50934...