HOME VULNERABILITIES VENDORSGeojson2kml Project

Geojson2kml ProjectCVEs & Vulnerabilities

1 CVEs affecting Geojson2kml Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

geojson2kml 1

CVE-2020-28429CRITICAL

All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})

23 Feb 2021

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database