This affects all versions of package curljs.
CWE-77
CVE-2020-28433
This affects all versions of package node-latex-pdf.
CVE-2020-28434
This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.
CVE-2020-28435
This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.
CVE-2020-28436
This affects all versions of package google-cloudstorage-commands.
CVE-2020-28437
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.