Lucene search
+L

1 matches found

OSV
OSV
added 2024/01/11 3:15 a.m.5 views

AZL-33349 CVE-2024-22195 affecting package nodejs18 for versions less than 18.20.3-3

Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting XSS. The Jinja xmlattr filter can be abused t...

6.1CVSS6.7AI score0.00892EPSS
SaveExploits0References1
Rows per page
Query Builder