Blakeembrey vulnerabilities
We track 1 vulnerability in Blakeembrey products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Blakeembrey vulnerabilities
- 9.8 Critical severity
js-template: Improper Control of Generation of Code
@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the attacker has access to write the template name. Version 1.2.0 contains a patch. As a workaround, don't pass untrusted i