windmill-cli (>=0.0.1, <=0.0.8) potentially affected by CVE-2025-55152 via @oakserver/oak (14.1.0)

@oakserver/oak NPM version 14.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @oakserver/oak and may be impacted: - windmill-cli =0.0.1, =0.0.8 Source cves: CVE-2025-55152 Source advisory: OSV:GHSA-R3V7-PC4G-7XP9...

windmill-cli (>=0.0.1, <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2, <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: SNYK:JS-OAKSERVEROAK-11735294...

CVE-2025-55152

creationtimestamp| type| source ---|---|--- 2025-08-08 23:11:09+00:00| published-proof-of-concept| https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9...