Skip to content
OpenAdvisories

Package · npm

squirrelly

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-40453 Public exploit

    squirrelly Code Injection vulnerability

    squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName.

    squirrelly npm
  • High 8.0
    CVE-2021-32819 Public exploit EPSS 58%

    Remote code execution in squirrelly

    Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code…

    squirrellyjs squirrelly squirrelly npm