CVE-2024-36361

The Pug template engine (version 3.0.2 ) is vulnerable to JavaScript code execution when an application processes untrusted input via the name option in the compileClient, compileFileClient, or compileClientWithDependenciesTracked functions. These functions are intended to compile Pug templates i...