Skip to content
OpenAdvisories

Package · npm

djv

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    Remote Code Execution (RCE)

    This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.