@27works/posto (2.0.2), @adradr/hardhat-dodoc (0.3.0) +66 more potentially affected by CVE-2021-32819 via squirrelly (>=5.1.0, <=8.0.8)

squirrelly NPM version =5.1.0, =0.1.0, =0.1.1, =0.3.0, =0.0.5, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =0.1.0-beta.1642, =0.1.0-beta.1642, =1.1.0-beta.3325 - @hats.finance/hats-contracts 2.0.0 - @ivoyant/component-array-template 1.0.0 and more Source cves: CVE-2021-32819 Source advisory: MEND:CVE-2021-32...

CVE-2021-32819: Exposure of Sensitive Information to an Unauthorized Actor

Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code execution may be triggered in...

CVE-2021-32819

Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code execution may be triggered in...

Squirrelly information leakage vulnerability

npm Npm squirrelly is an application from the American company npm. It provides a modern, configurable and powerful Express template engine implemented in JavaScript. Squirrelly suffers from an information disclosure vulnerability that stems from mixing pure template data with engine configuratio...