CVE-2020-8178CWE-78

CVE-2020-8178: vulnerability in jison

Published · Updated

Follow this CVE+ Monitor jison

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.6%
Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.
Affected products
n/a · jison