~ / search / GHSA-ffxg-xm4w-3wg9

GHSA-ffxg-xm4w-3wg9

Command Injection in corenlp-js-interface

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-28440

Packages

EcosystemPackageAffectedFixed in
npm corenlp-js-interface <= 1.0.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.

References

External links from the advisory. They lead to third-party sites.