← All advisories

Critical severity9.4GHSA Advisory· Published Jul 25, 2022· Updated Jun 17, 2026

CVE-2020-28435

CVE-2020-28435

Description

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ffmpeg-sdknpm	<= 0.0.5	—

Affected products

3

Lumiverse/Ffmpeg SDKGHSA
Range: <= 0.0.5
Package: https://npmjs.com/package/ffmpeg-sdk
Ffmpeg SDK Project/Ffmpeg SDK
cpe:2.3:a:ffmpeg-sdk_project:ffmpeg-sdk:*:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/ffmpeg-sdk
Range: <= 0.0.5

Patches

Vulnerability mechanics

References

5

security.snyk.io/vuln/SNYK-JS-FFMPEGSDK-1050429nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-rwvf-c3wm-qm6wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-28435ghsaADVISORY
github.com/CubetLabs/ffmpeg-sdk/blob/master/index.jsghsaWEB
github.com/shajanjp/ffmpeg-sdk/blob/master/index.jsghsaWEB

News mentions

0

No linked articles in our index yet.