CVE-2021-32817
1 advisory.
npm/express-hbs CVE-2021-32817: medium 5.4, EPSS 1.27%
Insecure template handling in express-hbs
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.4.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rwxp-hwwf-653v
- https://nvd.nist.gov/vuln/detail/CVE-2021-32817
- https://github.com/TryGhost/express-hbs/commit/ff6fad6e357699412d4e916273314e5e7af1500e
- https://github.com/TryGhost/express-hbs
- https://github.com/TryGhost/express-hbs#%EF%B8%8F-this-creates-a-potential-security-vulnerability
- https://securitylab.github.com/advisories/GHSL-2021-019-express-hbs
- https://www.npmjs.com/package/express-hbs
CVE-2021-32817 · published · modified · JSON