Description
Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.
Remediation
References
https://hackerone.com/reports/690010
Related Vulnerabilities
CVE-2022-41879 Vulnerability in npm package parse-server
CVE-2019-5444 Vulnerability in npm package serve-here.js
CVE-2023-26476 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livetable-ui
CVE-2020-28498 Vulnerability in npm package elliptic
CVE-2022-31053 Vulnerability in maven package com.clever-cloud:biscuit-java