Eta vulnerabilities
We track 1 vulnerability in Eta products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 30, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Eta vulnerabilities
- 8.8 High severity
eta: Improper Control of Generation of Code
Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. **Note:** This is exploitable only for users who are rendering