CVE-2020-28437 Blast Radius

CRITICAL • CVSS 9.4This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2020-28437.

Start Free Scan →← Back to CVE-2020-28437