CVE-2020-28437: heroku-env susceptible to command injection

Severity: Critical

CVSS Score: 9.8

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.