Skip to content
OpenAdvisories

Vendor

sroehrl

1 known vulnerabilities.

Products

neoan3-template 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-41170

    Evaluation of closures can lead to execution of methods & functions in current program scope

    neoan3-apps/template is a neoan3 minimal template engine. Versions prior to 1.1.1 have allowed for passing in closures directly into the template engine. As a result values that are callable are executed by the template engine. The issue arises if a value has…

    sroehrl neoan3-template neoan3-apps/template Packagist