jstachio__jstachio_CVE-2023-33962_1-0-0

A type-safe Java Mustache templating engine. Templates are compiled into readable Java source code and value bindings are statically checked. Documentation Latest SNAPSHOT JStachio doc Current released JStachio doc The doc is also on javadoc.io but is not aggregated like the above. The aggregated...

EUVD-2023-1810

Malicious code in bioql PyPI...

CVE-2023-33962

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...

Reflectionless Templates With Spring

A few Java libraries have shown up recently that use text templates, but compile to Java classes at build time. They can thus claim to some extent to be "reflection free". Together with potential benefits of runtime performance, they promise to be easy to use and integrate with GraalVM native ima...

GHSA-GWXV-JV83-6QJR JStachio XSS vulnerability: Unescaped single quotes

Impact Description: JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. Reproduction Steps: Use the following template code: html Set the value variable to ' onblur='alert1. java public class Escaping public static void mainString args Model model = ne...

io.jstach:jstachio-jmustache (0.10.0), io.jstach:jstachio-spring (0.10.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.10.0)

io.jstach:jstachio MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.10.0 - io.jstach:jstachio-spring 0.10.0 - io.jstach:jstachio-spring-example 0.10.0 -...

io.jstach:jstachio-jmustache (0.7.0) potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.7.0)

io.jstach:jstachio MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.7.0 Source cves: CVE-2023-33962 Source advisory: OSV:GHSA-GWXV-JV83-6QJR...

io.jstach:jstachio-jmustache (0.8.0), io.jstach:jstachio-spring (0.8.0) +1 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.8.0)

io.jstach:jstachio MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.8.0 - io.jstach:jstachio-spring 0.8.0 - io.jstach:jstachio-spring-example 0.8.0 Source cves:...

io.jstach:jstachio-jmustache (0.9.0), io.jstach:jstachio-spring (0.9.0) +1 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.9.0)

io.jstach:jstachio MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.9.0 - io.jstach:jstachio-spring 0.9.0 - io.jstach:jstachio-spring-example 0.9.0 Source cves:...

io.jstach:jstachio-jmustache (0.9.2), io.jstach:jstachio-spring (0.9.2) +1 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.9.2)

io.jstach:jstachio MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.9.2 - io.jstach:jstachio-spring 0.9.2 - io.jstach:jstachio-spring-example 0.9.2 Source cves:...

io.jooby:jooby-jstachio (3.0.0.m9), io.jstach:jstachio-jmustache (0.17.0) +5 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.17.0)

io.jstach:jstachio MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jooby:jooby-jstachio 3.0.0.m9 - io.jstach:jstachio-jmustache 0.17.0 - io.jstach:jstachio-spring 0.17.0 -...

dk.mada.jaxrs:openapi-jaxrs-client (0.9.17), io.jstach:jstachio-jmustache (0.10.1) +5 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.10.1)

io.jstach:jstachio MAVEN version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - dk.mada.jaxrs:openapi-jaxrs-client 0.9.17 - io.jstach:jstachio-jmustache 0.10.1 - io.jstach:jstachio-spring 0.10.1 -...

io.jstach:jstachio-jmustache (0.18.0), io.jstach:jstachio-spring (0.18.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.18.0)

io.jstach:jstachio MAVEN version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.18.0 - io.jstach:jstachio-spring 0.18.0 - io.jstach:jstachio-spring-example 0.18.0 -...

dk.mada.jaxrs:openapi-jaxrs-client (0.9.12), io.jstach:jstachio-jmustache (0.6.0) potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.6.0)

io.jstach:jstachio MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - dk.mada.jaxrs:openapi-jaxrs-client 0.9.12 - io.jstach:jstachio-jmustache 0.6.0 Source cves: CVE-2023-33962 Source advisory:...

io.jstach:jstachio-jmustache (0.11.1), io.jstach:jstachio-spring (0.11.1) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.11.1)

io.jstach:jstachio MAVEN version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.11.1 - io.jstach:jstachio-spring 0.11.1 - io.jstach:jstachio-spring-example 0.11.1 -...

io.jooby:jooby-jstachio (3.0.0.m7), io.jstach:jstachio-jmustache (0.12.0) +5 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.12.0)

io.jstach:jstachio MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jooby:jooby-jstachio 3.0.0.m7 - io.jstach:jstachio-jmustache 0.12.0 - io.jstach:jstachio-spring 0.12.0 -...

io.jstach:jstachio-jmustache (1.0.0), io.jstach:jstachio-spring (1.0.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (1.0.0)

io.jstach:jstachio MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 1.0.0 - io.jstach:jstachio-spring 1.0.0 - io.jstach:jstachio-spring-example 1.0.0 -...

io.jstach:jstachio-jmustache (0.16.0), io.jstach:jstachio-spring (0.16.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.16.0)

io.jstach:jstachio MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.16.0 - io.jstach:jstachio-spring 0.16.0 - io.jstach:jstachio-spring-example 0.16.0 -...

CVE-2023-33962

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...

Code injection

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...