Skip to content
OpenAdvisories

Package · npm

pickem

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-8qx3-8gm5-9cj2

    pickem vulnerable to terminal escape-sequence injection via unsanitized item text

    ### Impact pickem rendered item text (label, description, group, meta, name) to the terminal with no control-character sanitization. `chrome.row` only stripped ANSI from the **active** row; inactive rows, the public `createFormatter`, and selection-summary li…

    pickem npm