Tag

cve-2022-29078

Safeguard articles tagged "cve-2022-29078" — guides, analysis, and best practices for software supply chain and application security.

1 article

EJS template engine RCE via client option (CVE-2022-29078)

CVE-2022-29078 lets attackers achieve remote code execution in EJS via unsanitized render options. Affected versions, severity, and fixes inside.