Skip to content
OpenAdvisories

Package · Debian

node-ejs

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-29078 Public exploit EPSS 33%

    ejs template injection vulnerability

    The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName]. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS …

    node-ejs ejs node-ejs Debian Ubuntu npm