Do not open a public issue for a security problem. Use GitHub's private report form: https://github.com/nirholas/three-ws-avatar-cli/security/advisories/new
Include the affected version, a minimal reproduction and the impact you expect. You will get an acknowledgement within three business days and a fix or mitigation plan within fourteen.
The latest published minor version of @three-ws/avatar-cli receives fixes.