= 4.0.0
≤ 3.4.6
Caret before 2019-02-22 allows Remote Code Execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.