haml-coffee@1.5.0 vulnerabilities
Haml templates where you can write inline CoffeeScript.
-
latest version
1.14.1
-
first published
13 years ago
-
latest version published
11 years ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the haml-coffee package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
haml-coffee is a Haml templates where you can write inline CoffeeScript. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). A vulnerable application that passes user controlled request objects to the haml-coffee template engine may introduce RCE vulnerabilities. Additionally control over the How to fix Cross-site Scripting (XSS)? There is no fixed version for |
*
|