zaach/jison

Releases54

Frequency2 weeks 3 days

Last Releaseabout 14 years ago

Stars4.39K

Bison in JavaScript.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2020-8178NVD↗	<= 0.4.18	Jul 15, 2020Wednesday, 15 July 2020, 17:15	9.8 CRITICAL	10 HIGH
Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.