CVE-2020-28464: Djv Project Djv

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

Affected products

• Djv Project Djv: before 2.1.4 (fixed in 2.1.4)

Published 2021-01-04. Last modified 2026-06-17.