Vulnerabilities

TI-2025-01449 CVE-2025-1686 · GHSA-p75g-cxfj-7wrx

Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable…

MEDIUM 60

Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag.

CVSS 4.0MEDIUM 6.1 Network High privileges No interaction EPSS 0.00847 Published 2025-02-27 Partial fix · 4.1.0 CWE-73

TI-2022-17546 CVE-2022-37767 · GHSA-wxx5-w9jc-48wx

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement…

MEDIUM 45

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01509 Published 2022-09-12 No fix listed CWE-863

TI-2019-14347 CVE-2019-19899 · GHSA-83m8-7hj8-ff5w

Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to…

MEDIUM 45

Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessible via the public static java.lang.Class java.lang.Class.for…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01277 Published 2019-12-18 Fixed in 3.1.4 CWE-862

Vulnerabilities

Filters

Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable…

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement…

Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to…