Description

All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.

Remediation

References

https://snyk.io/vuln/SNYK-JS-CORENLPJSINTERFACE-1050435

Related Vulnerabilities

CVE-2019-1003051 Vulnerability in maven package org.jvnet.hudson.plugins:ircbot

CVE-2023-26920 Vulnerability in npm package fast-xml-parser

CVE-2018-11697 Vulnerability in npm package node-sass

CVE-2017-9793 Vulnerability in maven package org.apache.struts:struts2-core

CVE-2020-15174 Vulnerability in npm package electron

Severity

Critical

Classification

CWE-78

Tags

Third Party Advisory