Geojson2kml

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-28429	Geojson2kml Project Geojson2kml	Hig	0.53	7.3	0.63		Feb 23, 2021	All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})

CVE-2020-28429HigFeb 23, 2021
Geojson2kml Project
Geojson2kml
risk 0.53cvss 7.3epss 0.63
All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})