MEDIUM4.0
GHSA-ghr5-ch3p-vcr6
ejs lacks certain pollution protection
Quick fix
GHSA-ghr5-ch3p-vcr6 — ejs: upgrade to the fixed version with the command below.
npm install ejs@3.1.10Details
The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.
Are you affected?
Enter the version of the package you're using.