security.nuyts.tech
CVE-2016-10547 – NuytsTech Security
Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In au