Skip to content
OpenAdvisories

Package · npm

heroku-env

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.4
    CVE-2020-28437

    Command Injection

    This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.

    heroku-env npm