EPSS
Percentile
13.1%
github.com/stripe/stripe-cli is vulnerable to arbitrary code execution. An attacker can inject and execute malicious commands through the stripe login, stripe config -e, stripe community, and stripe open in windows.
stripe login
stripe config -e
stripe community
stripe open
github.com/stripe/stripe-cli/commit/be38da5c0191adb77f661f769ffff2fbc7ddf6cd
github.com/stripe/stripe-cli/pull/820
github.com/stripe/stripe-cli/security/advisories/GHSA-4cx6-fj7j-pjx9