Pug allows JavaScript code execution if an application accepts untrusted input
Moderate severity
GitHub Reviewed
Published
May 24, 2024
to the GitHub Advisory Database
•
Updated Apr 28, 2025
Give feedback on Dependabot alerts