Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8178
9.8
CRITICALCVSS v3
Severity scale
010
Description
Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.
NPM
GerHobbelt/jison
GitHubbison / YACC / LEX in JavaScript (LALR(1), SLR(1), etc. lexer/parser generator)
GitHubbison / YACC / LEX in JavaScript (LALR(1), SLR(1), etc. lexer/parser generator)<= 0.4.18NVD
lahmatiy/jison
GitHub