GHSA-jgrx-mgxx-jf9v

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

Source: GitHub Advisory Database (reviewed) High CVE-2021-3777

Packages

Ecosystem	Package	Affected	Fixed in
npm	tmpl	< 1.0.5	1.0.5

As written in the advisory (Markdown source, shown as plain text).

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion.

External links from the advisory. They lead to third-party sites.