Bison vulnerabilities

1 known vulnerability in Bison from GNU. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Bison: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-56389Jul 29, 2026GNU

  GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define too