CVE-2026-71286: Improper Neutralization of Special Elements Used in a Template Engine

The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input...

MAL-2025-5400 Malicious code in ember-glimmer (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ember-glimmer (npm)

The package communicates with a domain associated with malicious activity...