CVE-2020-7712 Command Injection
Published
HighCVSS 7.2
EPSS 3.1%
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.