3 matches found
CVE-2026-71215
art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...
EUVD-2026-53212
art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root. Because path.resolve discards ro...
PT-2021-5756
Name of the Vulnerable Software and Affected Versions node-tar versions prior to 3.3.2, 4.4.14, 5.0.6, and 6.1.1 Description The issue is related to the node-tar module for handling tar archives in Node.js, which has a problem with incorrect filtering of the '/' character sequence. This could all...