CVE-2021-23443

Name of the Vulnerable Software and Affected Versions edge.js versions prior to 5.3.2

Description A type confusion issue can be exploited to bypass input sanitization when the input to be rendered is an array, even if {{ }} are used. This affects the edge.js package, which is a template engine for Node.js.

Recommendations For versions prior to 5.3.2, update to version 5.3.2 or later to resolve the issue. As a temporary workaround, consider restricting the input to be rendered to strings or SafeValues to minimize the risk of exploitation.