CRITICAL9.8

GHSA-3w5v-p54c-f74x

ejs is vulnerable to remote code execution due to weak input validation

Quick fix

GHSA-3w5v-p54c-f74x — ejs: upgrade to the fixed version with the command below.

npm install ejs@2.5.5

Details

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in `ejs.renderFile()` function

Enter the version of the package you're using.

Introduced in: 0Fixed in: 2.5.5

Fixnpm install ejs@2.5.5