{"action":"Upgrade jsrender to 0.9.74 or later.","affected":[{"fixed":"0.9.74","introduced":"0"}],"component":"jsrender","cve_ids":["CVE-2016-3942"],"ecosystem":"npm","exploited":false,"fixed_versions":["0.9.74"],"ghsa_id":"GHSA-r87w-47m8-22w3","id":"tcs_01M5KG8FEVF5QRTZZWT8GSNMY8","modified_at":"2023-11-08T03:58:27.633161Z","published_at":"2020-09-01T15:24:24Z","references":["https://osv.dev/vulnerability/GHSA-r87w-47m8-22w3","https://nvd.nist.gov/vuln/detail/CVE-2016-3942","https://github.com/BorisMoore/jsrender/commit/f984e139deb0a7648d5b543860ec652c21f6dcf6","https://github.com/BorisMoore/jsrender","https://snyk.io/vuln/SNYK-DOTNET-JSRENDER-60173","https://www.npmjs.com/advisories/97"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-r87w-47m8-22w3","url":"https://osv.dev/vulnerability/GHSA-r87w-47m8-22w3"}],"summary":"Template Injection in jsrender"}