CVE-2017-1000228: nodejs ejs versions older than 2.5.3 is vulnerable to remote code exec ...

Severity: Critical

CVSS Score: 9.8

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function