Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2025-30829
  • npm/pug-ctp-filter
 Malicious code in pug-ctp-filter (npm) 14 Aug 2025
  • No fix available
MAL-2025-30830
  • npm/pug-i18n-loader
 Malicious code in pug-i18n-loader (npm) 14 Aug 2025
  • No fix available
GHSA-3965-hpx2-q597
  • npm/pug
  • npm/pug-code-gen
 Pug allows JavaScript code execution if an application accepts untrusted input 24 May 2024
  • Fix available
  • Severity - 6.8 (Medium)
MAL-2022-5517
  • npm/pug-web-readiness
 Malicious code in pug-web-readiness (npm) 26 Jul 2022
  • No fix available
GHSA-p493-635q-r6gr
  • npm/pug
  • npm/pug-code-gen
 Remote code execution via the `pretty` option. 03 Mar 2021
  • Fix available
  • Severity - 6.8 (Medium)