Eta.js Eta
2 CVEs affecting Eta.js Eta. Latest disclosed: 2023-02-01. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23630 | High | 8.6 | 2023-02-01 | Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has b… |
CVE-2022-25967 | High | 8.1 | 2023-01-30 | Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options… |