CVE-2021-23416

MEDIUM

curly-bracket-parser - Cross-Site Scripting via Template Input

Title source: llm

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Broken Link x_refsource_misc

CVSS v3 5.4

EPSS 0.0079

EPSS Percentile 52.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

curly-bracket-parser_project/curly-bracket-parser

npm/curly-bracket-parser 0npm

Published Jul 28, 2021

Tracked Since Feb 18, 2026