Art-template vulnerabilities
We track 1 vulnerability in Art-template products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Art-template vulnerabilities
- 7.5 High severity
art-template: Improper Limitation of a Pathname to a Restricted Directory
art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains insi