mde ejs vulnerable to XSS (GHSA-hwcf-pp87-7x6p)
Published: 2017-11-30T23:15:05Z
Aliases: CVE-2017-1000188
Severity: MODERATE · CWE: CWE-79

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the `ejs.renderFile()` resulting in code injection

Affected packages:
package: ecosystem: npm
name: ejs
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 2.5.5