Vulnerabilities > Stripe > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-05 | CVE-2024-45401 | Path Traversal vulnerability in Stripe Stripe-Cli stripe-cli is a command-line tool for the payment processor Stripe. | 7.1 |
| 2022-03-09 | CVE-2022-24753 | Unspecified vulnerability in Stripe CLI Stripe CLI is a command-line tool for the Stripe eCommerce platform. | 7.0 |
| 2021-04-01 | CVE-2021-21420 | Unspecified vulnerability in Stripe vscode-stripe is an extension for Visual Studio Code. | 7.8 |
| 2019-01-03 | CVE-2018-19249 | Improper Authentication vulnerability in Stripe API 1.0 The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the response under the object card{}, and reading the cvc_check information if the creation is successful without charging the actual card used in the transaction. | 7.5 |