CVE-2020-8178

Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks. Date published : 2020-07-15 https://hackerone.com/reports/690010