Pinned post
Pug
@pug_js
The pug template language (formerly known as jade), follow for updates about features, releases etc.
3 Following 200 Followers 54 Posts
Latest posts 5
Please update to the new v3.0.3 release of pug as soon as possible as it contains a security fix for a potential remote code execution vulnerability: github.com/pugjs/pug/rele…
github.com Release pug@3.0.3 · pugjs/pug Bug Fixes Update pug-code-gen with the following fix: (#3438) Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input... Today's pug release includes a critical security update. Please upgrade as soon as possible: github.com/pugjs/pug/secu…
github.com Remote code execution via the `pretty` option. ### Impact If a remote attacker was able to control the `pretty` option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug temp... 
You can now buy a support contract for Pug on opencollective.com/pug (see also, the FAQ: github.com/opencollective…)
opencollective.com pug - Open Collective A powerful templating engine for node.js and the browser