critical9.8
CVE-2020-28447
xopen is vulnerable to OS Command Injection in Exported Function xopen(filepath)
Impact
A command injection vulnerability affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function `xopen(filepath)`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | xopen | <= 1.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xopen Project | Xopen | All versions |