CVE-2018-3735

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template