ejs vulnerable to DoS due to weak input validation
Summary
CVE-2017-1000189: ejs vulnerable to DoS due to weak input validation. Affects ejs versions < 2.5.5. Fixed in 2.5.5. How to fix ↓
Also tracked for
- node-ejs · Debian:11
The same CVE-2017-1000189 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in ejs.renderFile()
How To Fix
Minimum fixed version
2.5.5
This is the first release that contains the fix.
npm install ejs@2.5.5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Related vulnerabilities
Recent vulnerabilities recorded for ejs.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.