Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-25345
7.5
HIGHCVSS v3
Published
March 15, 2023
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
swig
NPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.
NPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.<= 1.4.2NVD
swig-templatesNPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.
NPMA simple, powerful, and extendable templating engine for node.js and browsers, similar to Django, Jinja2, and Twig.<= 2.0.4NVD
GitHub
RubyGems