Please do not open a public issue for a security problem. Report it privately through GitHub instead: Security → Report a vulnerability, or open a private advisory.

Say what is affected, how to reproduce it and what an attacker could do with it. You get an answer within a week.

Only the latest published version of the CLI and the current site at seedr.danieldeusing.de get fixes.