PT-2021-23145

Name of the Vulnerable Software and Affected Versions neoan3-apps/template versions prior to 1.1.1 Description The issue arises from allowing closures to be passed directly into the template engine, which can execute values that are callable. This can lead to unintended or malicious execution if ...

CVE-2021-41170: Insecure Inherited Permissions

neoan3-apps/template is a neoan3 minimal template engine. Versions prior to 1.1.1 have allowed for passing in closures directly into the template engine. As a result values that are callable are executed by the template engine. The issue arises if a value has the same name as a method or function...