reactioncommerce / reaction-cli

A command line tool for working with Reaction Commerce.
33 stars 20 forks source link

[SECURITY] command-exists package <1.2.4 vulnerability #75

Open impactmass opened 6 years ago

impactmass commented 6 years ago

Issue Description

Got this when installing the CLI on a new environment:

WARN notice [SECURITY] command-exists has the following vulnerability: 1 critical. Go here for more details: https://nodesecurity.io/advisories?search=command-exists&version=1.2.2

Snyk also reports it here https://snyk.io/vuln/npm:command-exists

Steps to Reproduce

npm install -g reaction-cli

Possible Solution

Latest version of the package may have been fixed