CVE-2020-28464

CVE-2020-28464 affects the npm package djv prior to 2.1.4 . By controlling the schema file, an attacker can cause the runtime to execute arbitrary JavaScript on the victim host, i.e., a remote code execution (RCE) scenario. Several sources (NVD, GHSA, OSV, CNVD, Veracode, Snyk) consistently descr...