Skip to content
OpenAdvisories

Package · Go

github.com/stripe/stripe-cli

2 known vulnerabilities.

2 results · Feed

  • High 7.6

    stripe-cli Path Traversal vulnerability

    stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the …

  • High 7.7

    Code injection in Stripe CLI on windows

    Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe…