← Back

Mustache.js Project

mustache.js_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Mustache.js
mustache.js
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-8862
1Mustache.js Project
1Mustache.js
May 13, 2026
Jan 23, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.