Description
This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | djv | unspecified – < 2.1.4 | 2.1.4 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | djv | < 2.1.4 | 2.1.4 | GHSA-4hv7-3q38-97m8 |