~ / search / GHSA-ghr5-ch3p-vcr6

GHSA-ghr5-ch3p-vcr6

ejs lacks certain pollution protection

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-33883

Packages

EcosystemPackageAffectedFixed in
npm ejs < 3.1.10 3.1.10

Details

As written in the advisory (Markdown source, shown as plain text).

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

References

External links from the advisory. They lead to third-party sites.