Severity: Critical
CVSS Score: 9.8
All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.