CVE-2021-23784

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...

CVE-2021-23784

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...

CVE-2021-23784

CVE-2021-23784 affects the tempura templating package prior to 0.4.0. The esc function does not escape/sanitize inputs when the value is of type object (e.g., an array), allowing unescaped content to be returned and potentially exploited as Cross-Site Scripting (XSS). The vulnerability impact is ...

CVE-2021-23784 Cross-site Scripting (XSS)

This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...