~ / search / GHSA-3w5v-p54c-f74x

GHSA-3w5v-p54c-f74x

ejs is vulnerable to remote code execution due to weak input validation

Source: GitHub Advisory Database (reviewed) Critical CVE-2017-1000228

Packages

EcosystemPackageAffectedFixed in
npm ejs < 2.5.5 2.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in `ejs.renderFile()` function

References

External links from the advisory. They lead to third-party sites.