Skip to content
OpenAdvisories

Package · npm

geojson2kml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2020-28429 Scanner template EPSS 63%

    Command Injection

    All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})

    geojson2kml npm