lodash.template-fixed

lodash.template v4.5.0 La méthode Lodash .template exportée en tant que module Node.js. Installation Avec npm : $ sudo -H npm i -g npm $ npm i --save lodash.template Dans Node.js : var template = require'lodash.template'; Consultez la documentation ou le source du paquet pour plus de détails...

EUVD-2025-209156

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible through callbacks and variable method calls in templates, potentially allowing unauthorized method invocations...

CVE-2025-71281

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible through callbacks and variable method calls in templates, potentially allowing unauthorized method invocations...

PYSEC-2019-155

python-dbusmock before version 0.15.1 AddTemplate D-Bus method call or DBusTestCase.spawnservertemplate method could be tricked into executing malicious code if an attacker supplies a .pyc file...

CVE-2012-4968: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted string to the AbsoluteLinks, 2 BigSummary, 3 ContextSummary, 4 EscapeXML, 5 FirstParagraph, 6 FirstSentence, 7...

PT-2000-1991

Name of the Vulnerable Software and Affected Versions Zope versions 2.2.0 through 2.2.4 Description The issue concerns improper security registration for legacy names of object constructors, such as DTML method objects. This could allow attackers to perform unauthorized activities. Recommendation...