pkg:npm/ejs

5 total CVEsCRITICAL2HIGH1MEDIUM2

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.8CVE-2022-29078ejs template injection vulnerability
    from 0, < 3.1.7
  • CRITICAL9.8CVE-2017-1000228ejs is vulnerable to remote code execution due to weak input validation
    from 0, < 2.5.5
  • HIGH7.5CVE-2017-1000189ejs vulnerable to DoS due to weak input validation
    from 0, < 2.5.5
  • MEDIUM6.1CVE-2017-1000188mde ejs vulnerable to XSS
    from 0, < 2.5.5
  • MEDIUM4.0CVE-2024-33883ejs lacks certain pollution protection
    from 0, < 3.1.10