Advisory Weakness Curation

Arbitrary code execution in djv This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

Command Injection By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.