Search for packages
| purl | pkg:deb/debian/underscore@1.8.3~dfsg-1 |
| Next non-vulnerable version | 1.13.8~dfsg+~1.13.0-1 |
| Latest non-vulnerable version | 1.13.8~dfsg+~1.13.0-1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-864e-hkby-qfh6
Aliases: CVE-2021-23358 GHSA-cf4h-3jhx-xvhq |
Arbitrary Code Execution in underscore The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||