Security leak in _.template, please update #2915

Activity

1. jgonggrijp

   added

   fixed

   bug

   on Mar 15, 2021
2. willdurand commented on Mar 19, 2021

   

   willdurand

   on Mar 19, 2021

   More actions

   @jgonggrijp where is the 1.12.1 tag?
3. jgonggrijp commented on Mar 19, 2021

   

   jgonggrijp

   on Mar 19, 2021

   CollaboratorAuthor

   More actions

   @willdurand I intentionally postponed pushing that in order to give people who want to exploit the leak less to go on. I'll let you know when I push it.
4. willdurand commented on Mar 19, 2021

   

   willdurand

   on Mar 19, 2021

   More actions

   thanks
5. jgonggrijp

   linked a pull request that will close this issueSecurity fix for _.template variable parameter (CVE-2021-23358) #2917on Mar 29, 2021
6. jgonggrijp

   added a commit that references this issue on Mar 29, 2021

   Mention CVE-2021-23358 in code, test and documentation (#2915)

   c627e38
7. jgonggrijp

   closed this as completedin #2917on Mar 29, 2021
8. jgonggrijp commented on Mar 29, 2021

   

   jgonggrijp

   on Mar 29, 2021

   CollaboratorAuthor

   More actions

   @willdurand The tag is online now.

   👍React with 👍1Reacted by William Durand
9. ttc229

   added a commit that references this issue on Apr 26, 2021

   Update underscore version to avoid security vulnerabilities

   ...

   d261874
10. twolfson

    added a commit that references this issue on Apr 27, 2021

    Update underscore version to avoid security vulnerabilities (#61)

    ...

    068119c