EUVD-2021-1875

Malware in sbrugna...

GHSA-RQF8-8C89-MW29 Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting (XSS)

curly-bracket-parser is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser when used as a template library due to lack of user input sanitization...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

CVE-2021-23416

CVE-2021-23416 : Cross-site Scripting in curly-bracket-parser affects all versions when used as a template library due to improper sanitization of user input. The vulnerability enables injection of malicious scripts through template processing. Public advisories (GHSA/OSV) corroborate XSS across ...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

CVE-2021-23416: Improper Neutralization of Input During Web Page Generation

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

PT-2021-15505

Name of the Vulnerable Software and Affected Versions curly-bracket-parser affected versions not specified Description The issue arises when the curly-bracket-parser is used as a template library, as it fails to properly sanitize user input. Recommendations At the moment, there is no information...

Cross-site Scripting (XSS)

Overview curly-bracket-parser is a Simple parser to replace variables inside templates/strings and files. Affected versions of this package are vulnerable to Cross-site Scripting XSS. When used as a template library, it does not properly sanitize the user input. PoC const express = require'expres...

rvm-windows (>=0.0.1, <=1.0.7), simpartic (>=0.1.4, <=0.8.8) +1 more potentially affected by CVE-2021-23416 via curly-bracket-parser (1.3.5)

curly-bracket-parser NPM version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on curly-bracket-parser and may be impacted: - rvm-windows =0.0.1, =0.1.4, =0.3.0, =0.9.54 Source cves: CVE-2021-23416 Source advisory: SNYK:JS-CURLYBRACKETPARSER-12971...