Skip to content
OpenAdvisories

Vendor

blakeembrey

1 known vulnerabilities.

Products

js-template 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2024-45390

    @blakeembrey/template vulnerable to code injection when attacker controls template input

    @blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.2.0 contains a patch. As a workaround, don't pass untrusted …

    blakeembrey js-template @blakeembrey/template npm