{"action":"Upgrade ejs to 3.1.10 or later.","affected":[{"fixed":"3.1.10","introduced":"0"}],"component":"ejs","cve_ids":["CVE-2024-33883"],"ecosystem":"npm","epss":0.00614,"exploited":false,"fixed_versions":["3.1.10"],"ghsa_id":"GHSA-ghr5-ch3p-vcr6","id":"tcs_01M5KFRSBGAPT5J8HYQQPQM1VW","modified_at":"2026-09-10T03:50:11.217600593Z","published_at":"2024-04-28T18:30:31Z","references":["https://osv.dev/vulnerability/GHSA-ghr5-ch3p-vcr6","https://nvd.nist.gov/vuln/detail/CVE-2024-33883","https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5","https://github.com/mde/ejs","https://github.com/mde/ejs/compare/v3.1.9...v3.1.10","https://security.netapp.com/advisory/ntap-20240605-0003"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-ghr5-ch3p-vcr6","url":"https://osv.dev/vulnerability/GHSA-ghr5-ch3p-vcr6"}],"summary":"ejs lacks certain pollution protection"}