CVE-2020-28445

CRITICAL · CVSS 9.8 EPSS 1.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-07-25 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE

CVE-2020-28445

Severity

CRITICAL

CVSS

9.8

EPSS

1.42%

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.