1 matches found
GHSA-FV4G-GWPJ-74GR Path traversal vulnerability in stripe-cli
Impact A vulnerability exists in stripe-cli versions 1.11.1 and higher where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files. The update addresses the path traversal vulnerability by...