Blakeembrey

blakeembrey

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Template

template

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-45390 1Blakeembrey 1Template Jun 17, 2026 Sep 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 @blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.2.0 contains a patch....Show more @blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.2.0 contains a patch. As a workaround, don't pass untrusted input as the template display name, or don't use the display name feature.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-45390

1Blakeembrey

1Template

Jun 17, 2026

Sep 3, 2024

N/A· v4

9.8 CRITICAL· v3

N/A· v2

@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.2.0 contains a patch. As a workaround, don't pass untrusted input as the template display name, or don't use the display name feature.Show less