Lucene search

K
osvGoogleOSV:GHSA-GHR5-CH3P-VCR6
HistoryApr 28, 2024 - 6:30 p.m.

ejs lacks certain pollution protection

2024-04-2818:30:31
Google
osv.dev
28
ejs
package
pollution
protection
node.js
software

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

CPENameOperatorVersion
ejslt3.1.10

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%