Skip to content
OpenAdvisories

Vendor

pillarjs

4 known vulnerabilities.

Products

path-to-regexp 2 hbs 1 send 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2024-43799

    send vulnerable to template injection that can lead to XSS

    Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.

    pillarjs send send node-send Debian Ubuntu npm
  • Medium 4.0
    CVE-2021-32822

    File disclosure in hbs

    The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configura…

    pillarjs hbs hbs npm