CVE-2023-2142
In Nunjucks versions prior to version 3.2.4, it waspossible to bypass the restrictions which are provided by the autoescapefunctionality. If there are two user-controlled parameters on the sameline used in the views, it was possible to inject cross site scriptingpayloads using the backslash \ chara...