velocityjs
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix) | velocityjs | npm | Critical | Fix reported | |
| Velocity.js has a Prototype Pollution vulnerability through #set path assignment | velocityjs | npm | High | No fix reported |