Pebbletemplates Pebble Templates
3 CVEs affecting Pebbletemplates Pebble Templates. Latest disclosed: 2025-02-27. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-37767 | Critical | 9.8 | 2022-09-12 | Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this… |
CVE-2019-19899 | Critical | 9.8 | 2019-12-19 | Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessi… |
CVE-2025-1686 | Medium | 6.8 | 2025-02-27 | Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high p… |