node-ejs vulnerabilities (Debian)

6 vulnerabilities.

• node-ejs Debian ejs lacks certain pollution protection CVE-2024-33883 Public exploitFix available 4.0 MediumApril 28, 2024
• node-ejs Debian ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable,... CVE-2023-29827 Disputed 9.8 CriticalMay 4, 2023
• node-ejs Debian ejs template injection vulnerability CVE-2022-29078 Public exploitFix available EPSS 32.8% 9.8 CriticalApril 25, 2022
• node-ejs Debian ejs is vulnerable to remote code execution due to weak input validation CVE-2017-1000228 Fix available 9.8 CriticalNovember 17, 2017
• node-ejs Debian ejs vulnerable to DoS due to weak input validation CVE-2017-1000189 Fix available 7.5 HighNovember 17, 2017
• node-ejs Debian mde ejs vulnerable to XSS CVE-2017-1000188 Fix available 6.1 MediumNovember 17, 2017