edge-js/edge

edge-js/edge

GitHubGitHub
GitHubgithub.com
edgejs.devedgejs.dev
Releases72
Frequency1 month 2 weeks
Last Release
Stars794
Node.js template engine with a breath of fresh air
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-23443↗
5.4 MEDIUM5.8 MEDIUM

This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used.