MEDIUM6.8npm
GHSA-3965-hpx2-q597· CVE-2024-36361Pug allows JavaScript code execution if an application accepts untrusted input
Modified: 9/10/2026
package
pkg:npm/pug
Pug allows JavaScript code execution if an application accepts untrusted input
Modified: 9/10/2026
Remote code execution via the `pretty` option.
Modified: 9/10/2026