Linux Distros Unpatched Vulnerability : CVE-2020-8178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient input validation in npm package jison = 0.4.18 may lead to OS command injection attacks. CVE-2020-8178 Note that Nessus relies on the presence of t...

GHSA-VR9X-MM65-2438 Command Injection in jison

Withdrawn: This vulnerability is not present in the released npm package. Rather the vulnerable code is part of the repo, but not part of the package. See linked hackerone report for more details. Insufficient input validation in npm package jison = 0.4.18 may lead to OS command injection attacks...

OS Command Injection

jison is vulnerable to OS Command Injection. The vulnerability exists as it does not properly handle the command argument which is used in childprocess.exec...