image-tiler susceptible to command injection

CRITICO 9.8CVE-2020-28451 · GHSA-mrxv-pr4h-963q · Published 02/08/2022 · updated 17/06/2026

In breve

CVE-2020-28451 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda image-tiler (image-tiler project), image-tiler.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 75.2% delle vulnerabilità.
Correzione: aggiornare a 2.0.2 o successiva.

Package	Affected versions	Patched versions
image-tiler image-tiler_project	`< 2.0.2`	`2.0.2`
image-tiler npm	`all versions`	No fix yet

A command injection vulnerability affects the package image-tiler before version 2.0.2.

NVD description

This affects the package image-tiler before 2.0.2.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.