~ / search / GHSA-6x77-rpqf-j6mw

GHSA-6x77-rpqf-j6mw

ejs vulnerable to DoS due to weak input validation

Source: GitHub Advisory Database (reviewed) High CVE-2017-1000189

Packages

EcosystemPackageAffectedFixed in
npm ejs < 2.5.5 2.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in `ejs.renderFile()`

References

External links from the advisory. They lead to third-party sites.