pug-code-gen@3.0.3

{
  "id": "fc86918149f133f4165f14d724bf08e470926561e2587736b3a237f1f4449b98",
  "url": "https://github.com/pugjs/pug/releases/tag/pug-code-gen%403.0.3",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "pug-code-gen@3.0.3",
    "summary": "This release validates `templateName` and `globals` as JavaScript identifiers to prevent possible remote code execution when untrusted input is passed in compilation options.",
    "evidence": "Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options",
    "products": [
      {
        "name": {
          "value": "pug-code-gen",
          "evidence": "pug-code-gen@3.0.3"
        },
        "prerequisites": [
          {
            "value": "un-trusted user input is passed to the compilation options",
            "evidence": "if un-trusted user input is passed to the compilation options"
          }
        ],
        "fixed_versions": [
          {
            "value": "3.0.3",
            "evidence": "pug-code-gen@3.0.3"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-pugjs-pug",
  "document_id": 22261,
  "published_at": "2024-05-24T17:35:04+00:00"
}