CVE-2020-28440
CVE-2020-28440 affects the npm package corenlp-js-interface . All versions are vulnerable to Command Injection via the main function . Public sources (SNYK, NVD, CVE records) describe that a crafted input can be executed by the package when invoked through its main entry. The SNYK entry provides ...