Tag

underscore-js

Safeguard articles tagged "underscore-js" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

underscore.js template code injection (CVE-2021-23358)

CVE-2021-23358 lets attacker-controlled template settings inject arbitrary code via underscore.js's _.template function. Here's the impact, fix, and remediation steps.

Jan 5, 20267 min read