EUVD-2021-0830

Malware in sbrugna...

EUVD-2020-1493

Malware in sbrugna...

GHSA-H73G-8G27-XXCX Command injection in corenlp-js-prefab

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.'...

Command injection in corenlp-js-prefab

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.'...

GHSA-FFXG-XM4W-3WG9 Command Injection in corenlp-js-interface

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command Injection in corenlp-js-interface

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command Injection

corenlp-js-interface is vulnerable to command injection. The vulnerability is possible via the main function...

CVE-2020-28439

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:...

CVE-2020-28440

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command injection

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

CVE-2020-28439

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:...

CVE-2020-28440 Command Injection

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

CVE-2020-28440

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command Injection

Overview corenlp-js-interface is a deprecated package. Affected versions of this package are vulnerable to Command Injection via the main function. PoC var a = require"corenlp-js-interface"; a"' touch JHU '","","",""; Remediation There is no fixed version for corenlp-js-interface. Credit: JHU...

CVE-2020-28439: Improper Neutralization of Special Elements used in an OS Command

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:...

CVE-2020-28440: Improper Neutralization of Special Elements used in an OS Command

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

PT-2020-17009

Name of the Vulnerable Software and Affected Versions corenlp-js-prefab affected versions not specified Description The issue affects the corenlp-js-prefab package, which depends on a vulnerable package named corenlp-js-interface. The injection point is located in line 10 of the 'index.js' file...

PT-2020-17010

Name of the Vulnerable Software and Affected Versions corenlp-js-interface versions all Description The issue concerns Command Injection via the main function. Recommendations For all versions, consider disabling the main function as a temporary workaround until a patch is available. At the momen...