1 matches found
@scullyio/init (1.0.0-beta.4) potentially affected by CVE-2020-28470 via @scullyio/ng-lib (1.0.0-beta.1)
@scullyio/ng-lib NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/ng-lib and may be impacted: - @scullyio/init 1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...
7.3CVSS6.6AI score0.00825EPSS
SaveExploits0
20