In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10626.json"