CVE-2020-28437
Command Injection
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.
CVSS 3.1 · 9.4 Critical
EPSS 1.3%
KEV · Not listed
Vendors
Products