Read the docs

pugjs

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

pugjs records in CISA KEV

No pugjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Pug-code-gen · all components

TI-2021-04453 CVE-2021-21353 · GHSA-p493-635q-r6gr

Remote code execution in pug

Priority MEDIUM 48

Pug is an npm package which is a high-performance template engine.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.04269 Published 2021-03-03 Partial fix · 3.0.1, 2.0.3 +1 CWE-74
Open these records in search →