Skip to content
OpenAdvisories

Vendor

casid

1 known vulnerabilities.

Products

jte 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-23026

    HTML templates containing Javascript template strings are subject to XSS in jte

    jte (Java Template Engine) is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with `script` tags or script attributes that include a Javascript template string (backticks) are subject to XSS. The `javaScri…

    casid jte gg.jte:jte-runtime gg.jte:jte Maven