npm›corenlp-js-interface›CVE-2020-284409.8 CRITICALCommand InjectionAll versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.