CRITICAL9.8
GHSA-4hv7-3q38-97m8
Arbitrary code execution in djv
Quick fix
GHSA-4hv7-3q38-97m8 — djv: upgrade to the fixed version with the command below.
npm install djv@2.1.4Details
This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.
Are you affected?
Enter the version of the package you're using.