Skip to content
OpenAdvisories

Vendor

eta-dev

1 known vulnerabilities.

Products

eta 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2023-23630

    Cross-site (XSS) vulnerability with Express API in Eta

    Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied thing…

    eta-dev eta eta npm