EUVD-2021-0830

Malware in sbrugna...

EUVD-2020-1493

Malware in sbrugna...

Command injection in corenlp-js-prefab

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.'...

GHSA-H73G-8G27-XXCX Command injection in corenlp-js-prefab

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.'...

Command Injection in corenlp-js-interface

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

GHSA-FFXG-XM4W-3WG9 Command Injection in corenlp-js-interface

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command Injection

corenlp-js-interface is vulnerable to command injection. The vulnerability is possible via the main function...

CVE-2020-28439

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:...

CVE-2020-28440

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command injection

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

CVE-2020-28440 Command Injection

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function...

Command Injection

Overview corenlp-js-interface is a deprecated package. Affected versions of this package are vulnerable to Command Injection via the main function. PoC var a = require"corenlp-js-interface"; a"' touch JHU '","","",""; Remediation There is no fixed version for corenlp-js-interface. Credit: JHU...