CVE-2020-28464 — Remote Code Execution (RCE)
This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.
Published: 2021-01-04 · CVSS: 9.8 · CVSS 3.1
This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7