Release notes from pug

{
  "id": "1e5814f263267e9ac633082c783f926bb4559067975c7f4b8778a3dfdcb4e8d8",
  "url": "https://github.com/pugjs/pug/releases/tag/pug%403.0.1",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Release notes from pug",
    "summary": "The release fixes a remote code execution issue when an attacker controls the `pretty` option. Pug users should upgrade.",
    "evidence": "If a malicious attacker could control the pretty option, it was possible for them to achieve remote code execution on the server rendering the template.",
    "products": [
      {
        "name": {
          "value": "pug",
          "evidence": "Release notes from pug"
        },
        "prerequisites": [
          {
            "value": "control the pretty option",
            "evidence": "If a malicious attacker could control the pretty option"
          }
        ],
        "fixed_versions": [
          {
            "value": "pug@3.0.1",
            "evidence": "pug@3.0.1"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-pugjs-pug",
  "document_id": 22266,
  "published_at": "2021-02-28T18:23:40+00:00"
}