CVE-2020-28445

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.

Score

CVSS 3.1 9.8 Critical

Status

Modified - report@snyk.io

Published

2022-07-25

Last modified

2024-09-16

Weaknesses

CWE-77

Affected products

• Npm-help (Npm-help Project)

References

• https://security.netapp.com/advisory/ntap-20220901-0012/
• https://security.snyk.io/vuln/SNYK-JS-NPMHELP-1050983