vulntracker
.io
CVE Database
All CVEs
Vendors
Products
Account
Pricing
Feedback
Sign in
© 2026 vulntracker.io
Controlled Merge Project Controlled Merge
Product
Products
Controlled Merge Project
Controlled Merge Project Controlled Merge
Sign in
Application
npm
controlled-merge-project-controlled-merge
Affected by
…
Versions
4
Type
Application
Why is it called this? 2 raw source names
Affected
…
Runs on
…
Versions
4
CVE-2020-28268
affected
1.0.0 ≤ v ≤ 1.2.0
95%
95%
high
7.5
2020-11-15