lodash.template-fixed

lodash.template v4.5.0 Lodash 方法 .template 导出为 Node.js 模块。 安装 使用 npm： root@kitploit: $ sudo -H npm i -g npm $ npm i --save lodash.template 在 Node.js 中： root@kitploit: var template = require'lodash.template'; 更多详情请参阅文档或包源码。...

CLSA-2026-1784682758 TuxCare security update for lodash.template (9 CVEs)

TuxCare rebuilt lodash.template to address 9 CVEs. Fixed in 4.4.0-tuxcare.1...

09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.1, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.1.5 - @arezooq/webserverpackage 1.0.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-R5FR-RJXR-66JC...

org.webjars.npm:autolinker (>=0.24.1, <=0.28.1), org.webjars.npm:github-com-mattslocum-ng-webworker (0.2.3) +10 more potentially affected by CVE-2021-23337 +1 more via org.webjars.npm:lodash.template (4.5.0)

org.webjars.npm:lodash.template MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:lodash.template and may be impacted: - org.webjars.npm:autolinker =0.24.1, =2.9.0, =1.8.12, =3.5.0, =2.3.4, =2.5.17-beta.0 -...

09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.1, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.1.5 - @arezooq/webserverpackage 1.0.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: SNYK:JS-LODASHTEMPLATE-15869628...

09-nodejs (1.0.0), 11.17r (1.0.0) +337 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.4.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.1.0, =0.0.79, =0.0.120-2 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +54200 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1, <=4.18.1)

lodash.template NPM version =2.2.1, =1.0.1, =0.0.2, =0.0.10 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

Code Injection

Overview lodash.template is a The Lodash method .template exported as a Node.js module. Affected versions of this package are vulnerable to Code Injection due the improper validation of options.variable key names in .template. An attacker can execute arbitrary code at template compilation time by...