Antaris/RazorEngine

Antaris/RazorEngine

GitHubGitHub
GitHubgithub.com
antaris.github.ioantaris.github.io
Releases78
Frequency3 weeks 23 hours
Last Release
Stars2.17K
Open source templating engine based on Microsoft's Razor parsing engine
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-46703↗
9.8 CRITICAL7.5 HIGH

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer