critical9.8
CVE-2017-1000228
ejs is vulnerable to remote code execution due to weak input validation
Impact
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in `ejs.renderFile()` function
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | ejs | < 2.5.3 | 2.5.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ejs | Ejs | before 2.5.3 |