Swig-templates vulnerabilities

2 known vulnerabilities in Swig-templates from Swig-templates Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Swig-templates: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-25345Mar 15, 2023Swig-templates ProjectEPSS 1.05%

  Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.

• 9.8 Critical severity

  Swig-templates: Improper Control of Generation of Code

  CVE-2023-25344Mar 15, 2023Swig-templates ProjectEPSS 1.03%

  An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.