CVE-2024-33883

Medium severity, CVSS 4.0. EPSS: 0.6% chance of exploitation in the next 30 days.

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

Published 2024-04-28. Last modified 2026-06-17.