CVE-2021-23784

Name of the Vulnerable Software and Affected Versions: tempura versions prior to 0.4.0

Description: The issue arises when the input to the esc function is of type object, such as an array, and it is returned without being escaped or sanitized. This leads to a potential Cross-Site Scripting issue.

Recommendations: For versions prior to 0.4.0, update to version 0.4.0 or later to resolve the issue. As a temporary workaround, consider modifying the esc function to properly escape or sanitize object inputs, such as arrays, to prevent potential Cross-Site Scripting exploitation.