https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T01:22:59.112297+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2025-AVI-0106 CERTFR-2025-AVI-0106 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-11T01:22:59.184597+00:00 CERTFR-2025-AVI-0106 https://vulnerability.circl.lu/vuln/bdu:2024-04404 bdu:2024-04404 2026-10-11T01:22:59.184659+00:00 bdu:2024-04404 https://vulnerability.circl.lu/vuln/fkie_cve-2024-36361 fkie_cve-2024-36361 2026-10-11T01:22:59.184682+00:00

Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would typically be no reason to allow untrusted callers.

 https://vulnerability.circl.lu/vuln/ghsa-3965-hpx2-q597 GHSA-3965-hpx2-q597 — Pug allows JavaScript code execution if an application accepts untrusted input 2026-10-11T01:22:59.184727+00:00

Affected: npm: pug-code-gen, npm: pug

Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the `compileClient`, `compileFileClient`, or `compileClientWithDependenciesTracked` function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would typically be no reason to allow untrusted callers.