{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.4.0"}],"component":"express-hbs","cve_ids":["CVE-2021-32817"],"ecosystem":"npm","epss":0.01268,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rwxp-hwwf-653v","id":"tcs_01M5KGA68X1J8PPG4E5MAGNEN5","modified_at":"2023-12-06T01:01:15.976094Z","published_at":"2021-05-17T20:58:51Z","references":["https://osv.dev/vulnerability/GHSA-rwxp-hwwf-653v","https://nvd.nist.gov/vuln/detail/CVE-2021-32817","https://github.com/TryGhost/express-hbs/commit/ff6fad6e357699412d4e916273314e5e7af1500e","https://github.com/TryGhost/express-hbs","https://github.com/TryGhost/express-hbs#%EF%B8%8F-this-creates-a-potential-security-vulnerability","https://securitylab.github.com/advisories/GHSL-2021-019-express-hbs","https://www.npmjs.com/package/express-hbs"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-rwxp-hwwf-653v","url":"https://osv.dev/vulnerability/GHSA-rwxp-hwwf-653v"}],"summary":"Insecure template handling in express-hbs"}