https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:42:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-172284 EUVD-2026-172284 https://cve.radiocsirt.org/vuln/euvd-2026-172284 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28429 <p>All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require(&#34;geojson2kml&#34;); a(&#34;./&#34;,&#34;&amp; touch JHU&#34;,function(){})</p> <p>All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require(&#34;geojson2kml&#34;); a(&#34;./&#34;,&#34;&amp; touch JHU&#34;,function(){})</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-28429 https://cve.radiocsirt.org/vuln/ghsa-w83x-fp72-p9qc <p><strong>Affected:</strong> npm: geojson2kml</p> <p>All versions up to and including version 0.1.1 of package geojson2kml are vulnerable to Command Injection via the index.js file.</p> <p>### PoC: ```js var a =require(&#34;geojson2kml&#34;); a(&#34;./&#34;,&#34;&amp; touch JHU&#34;,function(){}) ```</p> <p><strong>Affected:</strong> npm: geojson2kml</p> <p>All versions up to and including version 0.1.1 of package geojson2kml are vulnerable to Command Injection via the index.js file.</p> <p>### PoC: ```js var a =require(&#34;geojson2kml&#34;); a(&#34;./&#34;,&#34;&amp; touch JHU&#34;,function(){}) ```</p> https://cve.radiocsirt.org/vuln/ghsa-w83x-fp72-p9qc https://cve.radiocsirt.org/vuln/gsd-2020-28429 gsd-2020-28429 https://cve.radiocsirt.org/vuln/gsd-2020-28429