← All advisories

High severity7.5NVD Advisory· Published Jan 19, 2021· Updated Jun 17, 2026

CVE-2020-28478

CVE-2020-28478

Description

This affects the package gsap before 3.6.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gsapnpm	< 3.6.0	3.6.0

Affected products

3

gsap/gsapdescription
ghsa-coords
pkg:npm/gsap
Range: < 3.6.0
Greensock/Greensock Animation Platform
cpe:2.3:a:greensock:greensock_animation_platform:*:*:*:*:*:node.js:*:*
Range: <3.6.0

Patches

Vulnerability mechanics

References

7

snyk.io/vuln/SNYK-JS-GSAP-1054614nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-6g8v-hpgw-h2v7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-28478ghsaADVISORY
github.com/greensock/GSAP/blob/master/src/gsap-core.jsghsaWEB
github.com/greensock/GSAP/blob/master/src/gsap-core.js%23L147nvdBroken LinkWEB
github.com/greensock/GSAP/releases/tag/3.6.0ghsaWEB
www.npmjs.com/package/gsap/v/3.6.0ghsaWEB

News mentions

0

No linked articles in our index yet.