diff --git a/http/cves/2020/CVE-2020-28429.yaml b/http/cves/2020/CVE-2020-28429.yaml
index 086ca2c6e0..9366ca7b31 100644
--- a/http/cves/2020/CVE-2020-28429.yaml
+++ b/http/cves/2020/CVE-2020-28429.yaml
@@ -18,8 +18,15 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2020-28429
+    cwe-id: CWE-78
+    epss-score: 0.01897
+    epss-percentile: 0.8876
+    cpe: cpe:2.3:a:geojson2kml_project:geojson2kml:*:*:*:*:*:node.js:*:*
   metadata:
-    max-request: 2
+    max-request: 1
+    vendor: geojson2kml_project
+    product: geojson2kml
+    framework: node.js
   tags: cve,cve2020,rce,geojson2kml,file-upload,intrusive
 
 variables: