{"action":"Upgrade djv to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"}],"component":"djv","cve_ids":["CVE-2020-28464"],"ecosystem":"npm","epss":0.03033,"exploited":false,"fixed_versions":["2.1.4"],"ghsa_id":"GHSA-4hv7-3q38-97m8","id":"tcs_01M5KF0MPZPD669MQ430FE0709","modified_at":"2026-03-13T21:56:27.725863Z","published_at":"2021-04-13T15:24:47Z","references":["https://osv.dev/vulnerability/GHSA-4hv7-3q38-97m8","https://nvd.nist.gov/vuln/detail/CVE-2020-28464","https://github.com/korzio/djv/pull/98/files","https://github.com/korzio/djv/blob/master/lib/utils/properties.js%23L55","https://snyk.io/vuln/SNYK-JS-DJV-1014545"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4hv7-3q38-97m8","url":"https://osv.dev/vulnerability/GHSA-4hv7-3q38-97m8"}],"summary":"Arbitrary code execution in djv"}