CVE-2020-28437 Information

Description

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.

Reference

https://security.snyk.io/vuln/SNYK-JS-HEROKUENV-1050432