PUG-RCE-CVE-2021-21353-POC

PUG-RCE CVE-2021-21353 POC Información de la vulnerabilidad Número CVE: cve-2021-21353 Puntuación CVSS: 8.1 pugversion ';='...

CVE-2025-29705

CVE-2025-29705 CVE-2025-29705 Introduction code-gen: A code generation tool that allows custom templates to generate different code, supporting MySQL, Oracle, SQL Server, PostgreSQL https://gitee.com/durcframework/code-gen This project has no access control, allowing anyone to freely access such...

CVE-2025-29705

code-gen =2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects...

CVE-2025-29705

code-gen =2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects...

PT-2025-16373 · Code-Gen · Code-Gen

Name of the Vulnerable Software and Affected Versions: code-gen versions 2.0.6 and earlier Description: The issue is related to Incorrect Access Control, where the project lacks permission control, allowing anyone to access such projects. Recommendations: For code-gen versions 2.0.6 and earlier,...

CVE-2025-29705

code-gen =2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects...

CVE-2025-29705

code-gen =2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects...

pug (>=3.0.0-canary-1, <=3.0.2-canary-10) potentially affected by CVE-2024-36361 via pug-code-gen (>=3.0.0-canary-1, <=3.0.2-canary-5)

pug-code-gen NPM version =3.0.0-canary-1, =3.0.0-canary-1, =3.0.2-canary-10 Source cves: CVE-2024-36361 Source advisory: OSV:GHSA-3965-HPX2-Q597...

Security Bulletin: A security vulnerability in Node.js pug and pug-code-gen module affects IBM Cloud Pak for Multicloud Management Managed Service.

Summary A security vulnerability in Node.js pug and pug-code-gen module affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2021-21353 DESCRIPTION: Node.js pug and pug-code-gen could allow a remote attacker to execute arbitrary code on the system,...

Remote Code Execution (RCE)

pug-code-gen is vulnerable to remote code execution RCE. The vulnerability exists as the allowed values of the pretty option of the pug compiler are overly permissive...

Remote Code Execution

Overview Impact In affected versions of pug and pug-code-gen, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remot...

CVE-2021-21353

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

Remote code execution

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

CVE-2021-21353

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

Remote Code Execution

Overview Impact In affected versions of pug and pug-code-gen, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remot...

pug (>=3.0.0-canary-1, <=3.0.0-canary-2) potentially affected by CVE-2021-21353 via pug-code-gen (>=3.0.0-canary-1, <=3.0.0-canary-2)

pug-code-gen NPM version =3.0.0-canary-1, =3.0.0-canary-1, =3.0.0-canary-2 Source cves: CVE-2021-21353 Source advisory: OSV:GHSA-P493-635Q-R6GR...

PT-2021-3172 · Unknown +1 · Pug-Code-Gen +1

Name of the Vulnerable Software and Affected Versions: pug versions prior to 3.0.1 pug-code-gen versions prior to 2.0.3 Description: The issue is related to the insufficient neutralization of special elements in the output of the Pug HTML preprocessor, specifically in the VisitMixin and...