npm/pickem: high
pickem vulnerable to terminal escape-sequence injection via unsanitized item text
Action: Upgrade pickem to 1.0.7 or later.
npm i pickem@1.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.7 | - |
Fixed versions
| 1.0.7 |
Sources
- osv: GHSA-8qx3-8gm5-9cj2
- https://github.com/calebogden/pickem-oss/security/advisories/GHSA-8qx3-8gm5-9cj2
- https://github.com/calebogden/pickem-oss
- https://github.com/calebogden/pickem-oss/releases/tag/v1.0.7
published · modified · JSON