CVE-2017-1000189

5

MEDIUMCVSS v2

Published

November 17, 2017

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()

NPMEmbedded JavaScript templates

< 2.5.5NVD

GitHubEmbedded JavaScript templates -- http://ejs.co

< 2.5.5NVD

NPM

TypeScript definitions for ejs

< 2.5.5NVD

GitHuba koa view render middleware, support all feature of ejs

< 2.5.5NVD

RubyGemsCompile and evaluate EJS (Embedded JavaScript) templates from Ruby.

< 2.5.5NVD