VDB
Sign up

package

npm/pickem

pkg:npm/pickem

HIGHnpm
GHSA-8qx3-8gm5-9cj2

pickem vulnerable to terminal escape-sequence injection via unsanitized item text

Modified: 8/26/2026