Advisories for Npm/Jison package

Insufficient input validation in npm package may lead to OS command injection attacks.