Shepherdwind

2 CVEs in 1 Shepherdwind product, including Velocity.js. Newest: CVE-2026-73649 (2026-08-13). Severity, EPSS and public exploits for each.

Shepherdwind products with known CVEs

ProductCVEs
Velocity.js2
Shepherdwind CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73649Critical9.82026-08-13Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, __p…
CVE-2026-44966High8.32026-05-26Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in…