Vulnerabilities (CVE)

Filtered by vendor Joyent Subscribe
Filtered by product Json
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7712 2 Joyent, Oracle 3 Json, Financial Services Regulatory Reporting With Agilereporter, Timesten In-memory Database 2022-07-25 6.5 MEDIUM 7.2 HIGH
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.