{"action":"Upgrade pug-code-gen to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"},{"fixed":"3.0.2","introduced":"3.0.0"}],"component":"pug-code-gen","cve_ids":["CVE-2021-21353"],"ecosystem":"npm","epss":0.04305,"exploited":false,"fixed_versions":["2.0.3","3.0.2"],"ghsa_id":"GHSA-p493-635q-r6gr","id":"tcs_01M5KG2FZ0SZ59X7D17RT00T1B","modified_at":"2026-09-10T03:49:14.371503003Z","published_at":"2021-03-03T02:03:52Z","references":["https://osv.dev/vulnerability/GHSA-p493-635q-r6gr","https://github.com/pugjs/pug/security/advisories/GHSA-p493-635q-r6gr","https://nvd.nist.gov/vuln/detail/CVE-2021-21353","https://github.com/pugjs/pug/issues/3312","https://github.com/pugjs/pug/pull/3314","https://github.com/pugjs/pug/commit/991e78f7c4220b2f8da042877c6f0ef5a4683be0","https://github.com/pugjs/pug/releases/tag/pug%403.0.1","https://www.npmjs.com/package/pug","https://www.npmjs.com/package/pug-code-gen"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-p493-635q-r6gr#npm/pug-code-gen","url":"https://osv.dev/vulnerability/GHSA-p493-635q-r6gr"}],"summary":"Remote code execution via the `pretty` option."}