Lucene search

K

Tempura Security Vulnerabilities - May

cve
cve

CVE-2021-23784

This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.

6.1CVSS

6AI Score

0.002EPSS

2021-11-03 06:15 PM
26