1 matches found
Command Injection
Overview Insufficient input validation in npm package jison = 0.4.18 may lead to OS command injection attacks. Recommendation No fix is currently available. Consider using an alternative package until a fix is made available. References - https://github.com/advisories/GHSA-vr9x-mm65-2438...
10CVSS2.3AI score0.03633EPSS
SaveExploits1Affected Software1
20