GHSA-ghr5-ch3p-vcr6

ghsaUSosv

ejs lacks certain pollution protection

view advisory published 2024-04-28Licence: CC-BY-4.0

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-33883US	—	0.61% (49th)	Exploit	2024-04-28
The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.