| Package | Affected versions | Patched versions |
|---|---|---|
| RazorEngine | ≤ 4.5.1-alpha001 | |
| razorengine | = 4.5.1< 4.5.1 | 4.5.1 |
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free