EUVD-2021-1875

Malware in sbrugna...

GHSA-RQF8-8C89-MW29 Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting in curly-bracket-parser

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

Cross-site Scripting (XSS)

curly-bracket-parser is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser when used as a template library due to lack of user input sanitization...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

CVE-2021-23416

CVE-2021-23416 : Cross-site Scripting in curly-bracket-parser affects all versions when used as a template library due to improper sanitization of user input. The vulnerability enables injection of malicious scripts through template processing. Public advisories (GHSA/OSV) corroborate XSS across ...

CVE-2021-23416

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...

rvm-windows (>=0.0.1 <=1.0.4), simpartic (>=0.1.4 <=0.8.8) +1 more potentially affected by CVE-2021-23416 via curly-bracket-parser (=1.3.5)

curly-bracket-parser NPM version =1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on curly-bracket-parser and may be impacted: - rvm-windows =0.0.1, =0.1.4, =0.3.0, =0.9.53 Source cves: CVE-2021-23416 Source advisory: SNYK:JS-CURLYBRACKETPARSER-1297...

Cross-site Scripting (XSS)

Overview curly-bracket-parser is a Simple parser to replace variables inside templates/strings and files. Affected versions of this package are vulnerable to Cross-site Scripting XSS. When used as a template library, it does not properly sanitize the user input. PoC const express = require'expres...