CVE-2020-7712

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

Date published : 2020-08-30

https://github.com/trentm/json/issues/144

https://github.com/trentm/json/pull/145