Lucene search
+L
Corenlp-js-interface ProjectCorenlp-js-interface

1 matches found

CVE
CVE
added 2020/12/11 4:55 p.m.55 views

CVE-2020-28440

CVE-2020-28440 affects the npm package corenlp-js-interface . All versions are vulnerable to Command Injection via the main function . Public sources (SNYK, NVD, CVE records) describe that a crafted input can be executed by the package when invoked through its main entry. The SNYK entry provides ...

9.8CVSS9.8AI score0.01963EPSS
Save