Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2025-19278
  • npm/ejs-client
 Malicious code in ejs-client (npm) 14 Aug 2025
  • No fix available
GHSA-ghr5-ch3p-vcr6
  • npm/ejs
 ejs lacks certain pollution protection 28 Apr 2024
  • Fix available
  • Severity - 6.9 (Medium)
MAL-2023-302
  • npm/ejs-audit
 Malicious code in ejs-audit (npm) 19 Jun 2023
  • No fix available
MAL-2023-112
  • npm/audit-ejs
 Malicious code in audit-ejs (npm) 15 Jun 2023
  • No fix available
GHSA-phwq-j96m-2c2q
  • npm/ejs
 ejs template injection vulnerability 26 Apr 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-6x77-rpqf-j6mw
  • npm/ejs
 ejs vulnerable to DoS due to weak input validation 05 Mar 2018
  • Fix available
  • Severity - 7.5 (High)
GHSA-3w5v-p54c-f74x
  • npm/ejs
 ejs is vulnerable to remote code execution due to weak input validation 30 Nov 2017
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-hwcf-pp87-7x6p
  • npm/ejs
 mde ejs vulnerable to XSS 30 Nov 2017
  • Fix available
  • Severity - 6.1 (Medium)