CVE-2020-28447
Command Injection
This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)
CVSS 3.1 · 9.8 Critical
EPSS 1.3%
KEV · Not listed
Vendors
Products