GHSA-g777-crp9-m27g
Apprite CLI makes Use of Hard-coded Credentials
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | appwrite-cli | < 3.0.0 | 3.0.0 |
| PyPI | appwrite | < 3.0.0 | 3.0.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
References
External links from the advisory. They lead to third-party sites.