CVE-2020-28494
1 advisory.
npm/total.js CVE-2020-28494: high 8.6
Command injection in total.js
Action: Upgrade total.js to 3.4.7 or later.
npm i total.js@3.4.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.7 | - |
Fixed versions
| 3.4.7 |
Sources
- osv: GHSA-4449-hg37-77v8
- https://nvd.nist.gov/vuln/detail/CVE-2020-28494
- https://github.com/totaljs/framework/commit/6192491ab2631e7c1d317c221f18ea613e2c18a5
- https://snyk.io/vuln/SNYK-JS-TOTALJS-1046672
- https://www.npmjs.com/package/total.js
CVE-2020-28494 · published · modified · JSON