CVE-2016-3942
1 advisory.
npm/jsrender CVE-2016-3942: medium 6.3
Template Injection in jsrender
Action: Upgrade jsrender to 0.9.74 or later.
npm i jsrender@0.9.74Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.74 | - |
Fixed versions
| 0.9.74 |
Sources
- osv: GHSA-r87w-47m8-22w3
- https://nvd.nist.gov/vuln/detail/CVE-2016-3942
- https://github.com/BorisMoore/jsrender/commit/f984e139deb0a7648d5b543860ec652c21f6dcf6
- https://github.com/BorisMoore/jsrender
- https://snyk.io/vuln/SNYK-DOTNET-JSRENDER-60173
- https://www.npmjs.com/advisories/97
CVE-2016-3942 · published · modified · JSON