StateVoicesNational / Spoke_Hackathon_Fork

mass-contact text/SMS distribution tool
Other
3 stars 2 forks source link

NODE UPDATE: No fix available: CLI #6

Open Arique1104 opened 10 months ago

Arique1104 commented 10 months ago

cli <=0.11.3 Arbitrary File Write in cli - https://github.com/advisories/GHSA-6cpc-mj5c-m9rq Node CLI Allows Arbitrary File Overwrite - https://github.com/advisories/GHSA-3mrp-qhcj-mwv5 No fix available node_modules/cli color-difference * Depends on vulnerable versions of cli node_modules/color-difference