stripe-cli vulnerabilities

2 known vulnerabilities in stripe-cli from Stripe. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  stripe-cli: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-45401Sep 5, 2024Stripe

  stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the -

• 7.0 High severity

  stripe-cli: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-24753Mar 9, 2022Stripe

  Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe