https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T10:25:40.184872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-71286 CVE-2026-71286 — ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString 2026-10-10T10:25:40.202670+00:00

Affected: miguelcobain ember-dynamic-render-template

The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.