CRITICAL9.8npm
GHSA-3w5v-p54c-f74x· CVE-2017-1000228ejs is vulnerable to remote code execution due to weak input validation
Modified: 11/8/2023
package
npm/ejs
pkg:npm/ejs
HIGH7.5npm
GHSA-6x77-rpqf-j6mw· CVE-2017-1000189ejs vulnerable to DoS due to weak input validation
Modified: 11/8/2023
MEDIUM4.0npm
GHSA-ghr5-ch3p-vcr6· CVE-2024-33883ejs lacks certain pollution protection
Modified: 9/10/2026
MEDIUM6.1npm
GHSA-hwcf-pp87-7x6p· CVE-2017-1000188mde ejs vulnerable to XSS
Modified: 11/8/2023
CRITICAL9.8npm
GHSA-phwq-j96m-2c2q· CVE-2022-29078ejs template injection vulnerability
Modified: 11/8/2023