Launchpad.net

Launchpad CVE tracker

CVE 2024-33883

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

See the

CVE page on Mitre.org for more details.

References

MISC: https://github.com/mde...
MISC: https://github.com/mde...