Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-25344
9.8
CRITICALCVSS v3
Published
March 15, 2023
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.
swig
NPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.
NPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.<= 1.4.2NVD
swig-templatesNPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.
NPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.<= 2.0.4NVD
GitHub
RubyGems