Skip to content
OpenAdvisories

Vendor

art-template

1 known vulnerabilities.

Products

art-template 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-71215

    art-template - Path Traversal in Sub-Template Resolution via include()/extend()

    art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains ins…

    art-template art-template