paularmstrong/swig

Releases52

Frequency2 weeks 6 days

Last Releasealmost 12 years ago

Stars3.09K

Take a swig of the best template engine for JavaScript.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2023-25344NVD↗	<= 1.4.2	Mar 15, 2023Wednesday, 15 March 2023, 20:15	9.8 CRITICAL	—
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.
CVE-2023-25345NVD↗	<= 1.4.2	Mar 15, 2023Wednesday, 15 March 2023, 20:15	7.5 HIGH	—
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.