CVE-2020-28464

Published January 4th, 2021

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

10

HIGH

Affected

1

PROJECT

Description

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

Dynamic JSON Schema Validator - Supports draft-04/06

GitHub

288