Skip to content
OpenAdvisories

Vendor

stripe

5 known vulnerabilities.

Products

stripe-cli 2 smokescreen 2 vscode-stripe 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.6
    CVE-2024-45401

    stripe-cli Path Traversal vulnerability

    stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the …

    stripe stripe-cli github.com/stripe/stripe-cli Go
  • High 7.7
    CVE-2022-24753

    Code injection in Stripe CLI on windows

    Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe…

    stripe stripe-cli github.com/stripe/stripe-cli Go
  • High 7.5
    CVE-2021-21420

    Vulnerability in Stripe for Visual Studio Code < 1.7.3

    vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability c…

    stripe vscode-stripe