VULNERABILITY INTELLIGENCE

CVE-2026-71286

CVSS score6.1 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2026-08-05
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.

Weakness classification

  • 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c: CWE-1336

Primary references