Description
haml-coffee is a JavaScript templating solution. haml-coffee mixes pure template data with engine configuration options through the Express render API. More specifically, haml-coffee supports overriding a series of HTML helper functions through its configuration options.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.14.1
References
Could your website be exposed too?
SmartScanner can check your website for Insecure template handling in haml-coffee and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Insecure template handling in Squirrelly - CVE-2021-32819
- Insecure password handling vulnerability in Strapi - CVE-2021-46440
- Insecure random number generation in keypair - CVE-2021-41117
- uri-template-lite Regular Expression Denial of Service - CVE-2021-43309
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023