https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T00:19:19.329523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-38304 EUVD-2026-38304 2026-10-16T00:19:19.450361+00:00 EUVD-2026-38304 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8178 fkie_cve-2020-8178 2026-10-16T00:19:19.450400+00:00

Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.

 https://cve.radiocsirt.org/vuln/ghsa-vr9x-mm65-2438 Withdrawn: GHSA-vr9x-mm65-2438 — Command Injection in jison 2026-10-16T00:19:19.450433+00:00

Withdrawn by the publisher.

Affected: npm: jison

**Withdrawn:** This vulnerability is not present in the released npm package. Rather the vulnerable code is part of the repo, but not part of the package. See linked hackerone report for more details.

Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.

 https://cve.radiocsirt.org/vuln/gsd-2020-8178 gsd-2020-8178 2026-10-16T00:19:19.450461+00:00 gsd-2020-8178 https://cve.radiocsirt.org/vuln/oesa-2022-1546 OESA-2022-1546 — nodejs-jison security update 2026-10-16T00:19:19.450475+00:00

Affected: openEuler:20.03-LTS-SP1: nodejs-jison, openEuler:20.03-LTS-SP2: nodejs-jison, openEuler:20.03-LTS-SP3: nodejs-jison

A parser generator with Bison's API. Security Fix(es): Insufficient input validation in npm package `jison` &lt;= 0.4.18 may lead to OS command injection attacks.(CVE-2020-8178)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8178 UBUNTU-CVE-2020-8178 2026-10-16T00:19:19.450500+00:00

Affected: Ubuntu:18.04:LTS: node-jison, Ubuntu:20.04:LTS: node-jison, Ubuntu:22.04:LTS: node-jison, Ubuntu:24.04:LTS: node-jison, Ubuntu:25.10: node-jison, Ubuntu:26.04:LTS: node-jison

Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.