Vulnerabilities > HOT Formula Parser Project

DATE CVE VULNERABILITY TITLE RISK
2020-01-11 CVE-2020-6836 Code Injection vulnerability in Hot-Formula-Parser Project Hot-Formula-Parser
grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection.
network
low complexity
hot-formula-parser-project CWE-94
critical
9.8