12 matches found
CVE-2021-32819
CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...
CVE-2024-40453
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...
Code Injection
SquirrellyJS is vulnerable to Code Injection. The vulnerability is due to improper handling of input in the options.varName component of SquirrellyJS, allowing an attacker to inject and execute arbitrary code...
GHSA-W5PW-GMCW-RFC8 squirrelly Code Injection vulnerability
squirrellyjs squirrelly v9.0.0 was discovered to contain a code injection vulnerability via the component options.varName. The issue was fixed in version 9.1.0...
squirrelly Code Injection vulnerability
squirrellyjs squirrelly v9.0.0 was discovered to contain a code injection vulnerability via the component options.varName. The issue was fixed in version 9.1.0...
CVE-2024-40453
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...
CVE-2024-40453
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...
CVE-2024-40453: Improper Control of Generation of Code
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...
CVE-2024-40453
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...
CVE-2024-40453
CVE-2024-40453 affects squirrellyjs (v9.0.0) with a code injection vulnerability via the component option varName. An exploit exists (POC) demonstrating remote code execution-like behavior; see exploit repo: https://github.com/BwithE/CVE-2024-40453. Remediation per sources: upgrade to v9.0.1 or l...
PT-2024-28852
Name of the Vulnerable Software and Affected Versions squirrellyjs squirrelly version 9.0.0 Description The issue is a code injection vulnerability via the component options.varName. This vulnerability was discovered in squirrellyjs squirrelly and was fixed in version 9.0.1, however, another sour...
