image-tiler susceptible to command injection

CRÍTICO 9.8CVE-2020-28451 · GHSA-mrxv-pr4h-963q · Published 02/08/2022 · updated 17/06/2026

En resumen

CVE-2020-28451 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a image-tiler (image-tiler project), image-tiler.
Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 75.2% de las vulnerabilidades.
Solución: actualizar a 2.0.2 o posterior.

Package	Affected versions	Patched versions
image-tiler image-tiler_project	`< 2.0.2`	`2.0.2`
image-tiler npm	`all versions`	No fix yet

A command injection vulnerability affects the package image-tiler before version 2.0.2.

NVD description

This affects the package image-tiler before 2.0.2.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.