CVE-2021-32819 Scanner
CVE-2021-32819 scanner - Remote Code Execution (RCE) vulnerability in squirrelly
Used 3.2k times · 5.9k assets checked · url
CVE
CVE-2021-32819
8.8
CVSShigh
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code execution may be triggered in downstream applications. This issue is fixed in version 9.0.0. For complete details refer to the referenced GHSL-2021-023.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
squirrelly
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: squirrelly
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →