CVE-2020-28447: Xopen Project Xopen

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)

Affected products

• Xopen Project Xopen: any version

Published 2022-07-25. Last modified 2026-06-17.