Sploitus

CVE-2023-23630

No indexed exploits for CVE-2023-23630 yet

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to `res.render`.

Affected products
Eta, Express
Eta.js Eta
< 2.0.0
Fix
Available
CVSS 3.1
8.6 HIGH
EPSS
0.6% (46th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2023-02-01
CVE-2023-23630 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2023-23630 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2023-23630 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.