[VULN] Security Alert for ejs

[srm-feature3-dev-test]

Alert IDs:

• 2f2eebd0-2db1-4b28-ba1f-44d48d9e8399

Vulnerabilities in ejs

Release: New release

Total Vulnerabilities: 1

---

1. CVE-2023-29827

Severity: CRITICAL (Score: 9.8)

Description:
ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-29827

Alert ID: 2f2eebd0-2db1-4b28-ba1f-44d48d9e8399

---