Description
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | appwrite-cli | < 3.0.0 | 3.0.0 | GHSA-g777-crp9-m27g |
| PyPI | appwrite | < 3.0.0 | 3.0.0 | GHSA-g777-crp9-m27g |