Skip to content
OpenAdvisories

Product · HackerOne

nunjucks node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2016-10547

    Cross-Site Scripting in nunjucks

    Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In autoescape mode, all template vars should automatically be escaped. By using an array for the keys, s…

    HackerOne nunjucks node module nunjucks npm