ejs

Embedded JavaScript templates

Latest 7.0.1

NPM

88%

Total Score

healthy

Healthy: active maintenance and a current, stable release outweigh workflow pinning gaps.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All workflows were analyzed without untrusted checkouts or script injection, but both action references are unpinned and one high-confidence medium-severity finding uses an archived action. These are workflow hygiene risks, not evidence of an unsafe release on their own.

Vulnerabilities

Title	Versions	Severity
CVE-2024-33883 ejs is vulnerable to Protection Mechanism Failure in versions 0.0.0 - 3.1.10.	0.0.0 - 3.1.10	Medium
CVE-2022-29078 ejs is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 3.1.7.	0.0.0 - 3.1.7	Critical
CVE-2017-1000189 ejs is vulnerable to Improper Input Validation in versions 0.0.0 - 2.5.5.	0.0.0 - 2.5.5	High
CVE-2017-1000188 ejs is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.5.5.	0.0.0 - 2.5.5	Medium
CVE-2017-1000228 ejs is vulnerable to Improper Input Validation in versions 0.0.0 - 2.5.3.	0.0.0 - 2.5.3	Critical