CVE-2020-28437
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.
9.8CVSS
9.6AI Score
0.003EPSS