Description
webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.
Remediation
References
https://github.com/code4craft/webmagic/issues/1122
Related Vulnerabilities
CVE-2020-36188 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-7746 Vulnerability in maven package org.webjars.bower:chart.js
CVE-2018-3721 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2020-28458 Vulnerability in maven package org.webjars.bower:datatables.net
CVE-2020-7773 Vulnerability in npm package markdown-it-highlightjs