Tag

ejs-npm

Safeguard articles tagged "ejs-npm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

Using EJS on npm Safely: CVE-2022-29078 and Beyond

The ejs npm package is a capable template engine that has also been the subject of a serious RCE advisory. Here is how to use it without opening that door.

Feb 24, 20255 min read