CVE-2020-28445

creationtimestamp| type| source ---|---|--- 2022-07-25 18:39:11+00:00| seen| https://t.me/cibsecurity/46928...

CVE-2020-28445

CVE-2020-28445 affects the npm-help package. The vulnerability is in the function export.latestVersion() in index.js (line 13), enabling command injection . Multiple sources describe a global impact across all versions and highlight that an attacker can inject and execute commands (as shown in th...