CVE-2020-8178

Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.

Score

CVSS 3.1 9.8 Critical

Status

Modified - support@hackerone.com

Published

2020-07-15

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Jison (Jison Project)

References

• https://hackerone.com/reports/690010