Arbitrary Code Execution

Overview swig-templates is an A simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig. Affected versions of this package are vulnerable to Arbitrary Code Execution via the renderFile method. Note: The following conditions are required to...

UBUNTU-CVE-2017-1000188

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

nodejs ejs denial of service vulnerability

nodejs ejs is an embedded JavaScript template with flow control, customizable delimiters and escaped output. A security vulnerability exists in the 'ejs.renderFile' function in nodejs ejs versions prior to 2.5.5, which stems from weak input validation. An attacker can exploit the vulnerability to...