CVE-2021-21353
2 advisories.
npm/pug CVE-2021-21353: medium 6.8
Remote code execution via the `pretty` option.
Action: Upgrade pug to 3.0.1 or later.
npm i pug@3.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.1 | - |
Fixed versions
| 3.0.1 |
Sources
- osv: GHSA-p493-635q-r6gr
- https://github.com/pugjs/pug/security/advisories/GHSA-p493-635q-r6gr
- https://nvd.nist.gov/vuln/detail/CVE-2021-21353
- https://github.com/pugjs/pug/issues/3312
- https://github.com/pugjs/pug/pull/3314
- https://github.com/pugjs/pug/commit/991e78f7c4220b2f8da042877c6f0ef5a4683be0
- https://github.com/pugjs/pug/releases/tag/pug%403.0.1
- https://www.npmjs.com/package/pug
- https://www.npmjs.com/package/pug-code-gen
CVE-2021-21353 · published · modified · JSON
npm/pug-code-gen CVE-2021-21353: medium 6.8
Remote code execution via the `pretty` option.
Action: Upgrade pug-code-gen to 2.0.3 or later.
npm i pug-code-gen@2.0.3npm i pug-code-gen@3.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3 | - |
| 3.0.0 | 3.0.2 | - |
Fixed versions
| 2.0.3 | 3.0.2 |
Sources
- osv: GHSA-p493-635q-r6gr#npm/pug-code-gen
- https://github.com/pugjs/pug/security/advisories/GHSA-p493-635q-r6gr
- https://nvd.nist.gov/vuln/detail/CVE-2021-21353
- https://github.com/pugjs/pug/issues/3312
- https://github.com/pugjs/pug/pull/3314
- https://github.com/pugjs/pug/commit/991e78f7c4220b2f8da042877c6f0ef5a4683be0
- https://github.com/pugjs/pug/releases/tag/pug%403.0.1
- https://www.npmjs.com/package/pug
- https://www.npmjs.com/package/pug-code-gen
CVE-2021-21353 · published · modified · JSON