Description
Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.
Remediation
References
https://hackerone.com/reports/690010
Related Vulnerabilities
CVE-2021-41184 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery-ui
CVE-2021-40822 Vulnerability in maven package org.geoserver:gs-main
CVE-2011-3190 Vulnerability in maven package tomcat:tomcat-coyote
CVE-2021-23359 Vulnerability in npm package port-killer
CVE-2020-8237 Vulnerability in maven package org.webjars.npm:json-bigint