Skip to content
OpenAdvisories

Package · Debian

node-nunjucks

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2023-2142

    Nunjucks autoescape bypass leads to cross site scripting

    In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two user-controlled parameters on the same line used in the views, it was possible to inject cross site sc…

    Mozilla Nunjucks nunjucks node-nunjucks Debian Ubuntu npm