Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28447 EUVD-2022-6274GHSA-74wf-cwjg-9cf2

Command Injection

Published Jul 25, 2022 · Updated Sep 17, 2024 · Assigned by snyk

Description

This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)

Affected products

VendorProductAffectedFixed
— xopen < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm xopen <= 1.0.0 — GHSA-74wf-cwjg-9cf2

References