TI-2023-14035 CVE-2023-29827 · GHSA-j5pp-6f4w-r5r6
ejs v3.1.9 is vulnerable to server-side template injection.
Priority HIGH 82
ejs v3.1.9 is vulnerable to server-side template injection.
Vulnerabilities
5 records
TI-2022-11633 CVE-2022-29078 · GHSA-phwq-j96m-2c2q
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side…
Priority HIGH 67
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName].
TI-2017-14544 CVE-2017-1000228 · GHSA-3w5v-p54c-f74x
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak…
Priority MEDIUM 51
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
TI-2017-14510 CVE-2017-1000189 · GHSA-6x77-rpqf-j6mw
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak…
Priority LOW 37
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()
TI-2017-14509 CVE-2017-1000188 · GHSA-hwcf-pp87-7x6p
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the…
Priority LOW 30
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection