Description

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input.

Remediation

References

https://github.com/magynhard/curly-bracket-parser/blob/master/src/curly-bracket-parser/curly-bracket-parser.js%23L31

https://snyk.io/vuln/SNYK-JS-CURLYBRACKETPARSER-1297106

Related Vulnerabilities

CVE-2017-16192 Vulnerability in npm package getcityapi.yoehoehne

CVE-2021-42767 Vulnerability in maven package org.neo4j.procedure:apoc

CVE-2020-7604 Vulnerability in npm package pulverizr

CVE-2022-0853 Vulnerability in maven package jboss:jboss-client

CVE-2020-8237 Vulnerability in npm package json-bigint

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Broken Link Exploit Third Party Advisory