Mozilla Nunjucks
2 CVEs affecting Mozilla Nunjucks. Latest disclosed: 2024-11-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2142 | Medium | 6.1 | 2024-11-26 | In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two… |
CVE-2016-10547 | Medium | 6.1 | 2018-05-31 | Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In a… |