https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 06:29:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349677 EUVD-2026-349677 https://cve.radiocsirt.org/vuln/euvd-2026-349677 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71286 <p>The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer&#39;s compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.</p> <p>The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer&#39;s compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71286 https://cve.radiocsirt.org/vuln/ghsa-pvmf-8hpv-qh7r <p>The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its `templateString` property directly into Ember/Glimmer&#39;s compileTemplate() (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input. Because compileTemplate() dynamically compiles and renders the supplied string as a live Handlebars/Glimmer template, any application that renders attacker-influenced data through this component&#39;s templateString property is exposed to client-side template injection: an attacker-controlled Handlebars expression is compiled and executed in the context of the rendering component, which can be leveraged for cross-site scripting depending on what helpers/context are exposed to the compiled template.</p> <p>The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its `templateString` property directly into Ember/Glimmer&#39;s compileTemplate() (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input. Because compileTemplate() dynamically compiles and renders the supplied string as a live Handlebars/Glimmer template, any application that renders attacker-influenced data through this component&#39;s templateString property is exposed to client-side template injection: an attacker-controlled Handlebars expression is compiled and executed in the context of the rendering component, which can be leveraged for cross-site scripting depending on what helpers/context are exposed to the compiled template.</p> https://cve.radiocsirt.org/vuln/ghsa-pvmf-8hpv-qh7r