MEDIUM6.8npm
GHSA-3965-hpx2-q597· CVE-2024-36361Pug allows JavaScript code execution if an application accepts untrusted input
Modified: 9/10/2026
package
npm/pug
pkg:npm/pug
MEDIUM6.8npm
GHSA-p493-635q-r6gr· CVE-2021-21353Remote code execution via the `pretty` option.
Modified: 9/10/2026