npm/djv CVE-2020-28464: critical 9.8, EPSS 3.03%

Arbitrary code execution in djv

Action: Upgrade djv to 2.1.4 or later.

npm i djv@2.1.4

Affected

Fixed versions

Sources

• osv: GHSA-4hv7-3q38-97m8
• https://nvd.nist.gov/vuln/detail/CVE-2020-28464
• https://github.com/korzio/djv/pull/98/files
• https://github.com/korzio/djv/blob/master/lib/utils/properties.js%23L55
• https://snyk.io/vuln/SNYK-JS-DJV-1014545

CVE-2020-28464 · published 2021-04-13T15:24:47Z · modified 2026-03-13T21:56:27.725863Z · JSON