description: Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.
problem types: OS Command Injection (CWE-78)
affected:
{
product: jison
vendor: n/a
versions:
status: affected, version: Not Fixed
}