TI-2026-49953 CVE-2026-71286 · GHSA-pvmf-8hpv-qh7r
ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString
Priority LOW 27
The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitizati…