Skip to content
OpenAdvisories

Package · npm

ejs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.0
    CVE-2024-33883 Public exploit

    ejs lacks certain pollution protection

    The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

    node-ejs ejs node-ejs Debian Ubuntu npm
  • Medium 6.1
    CVE-2017-1000188

    mde ejs vulnerable to XSS

    nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection

    node-ejs ejs Debian npm