org.webjars.bower:mustache@2.1.2 vulnerabilities
latest version
4.0.1
latest non vulnerable version
first published
9 years ago
latest version published
4 years ago
licenses detected
- [2.1.2,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.bower:mustache package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
When using attributes without quotes in a mustache template, an attacker can manipulate the input to introduce additional attributes, potentially executing code. This may lead to a Cross-site Scripting (XSS) vulnerability, assuming an attacker can influence the value entered into the template. If the mustache template is used to render user-generated content, this vulnerability may escalate to a persistent XSS vulnerability. | [,2.2.1) |