@rhinostone/swig

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

GHSA-2mf3-mr2r-r4vf

@rhinostone/swig: arbitrary local file read via include/extends path traversal

### Overview `@rhinostone/swig` is a maintained fork of the abandoned `swig` template engine and inherited the directory-traversal vulnerability tracked upstream as CVE-2023-25345 / GHSA-2rq5-699j-x7p6. The `{% include %}`, `{% extends %}`, and `{% import %}`…

@rhinostone/swig-core @rhinostone/swig-jinja2 @rhinostone/swig @rhinostone/swig-twig npm

Aug 18, 2026