CVE-2024-33883
The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.
Published: 2024-04-28 · CVSS: 4.0 · CVSS 3.1
The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7