Skip to content
OpenAdvisories

Vendor

miguelcobain

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString

    The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the…