Miguelcobain vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Miguelcobain products: 1 record(s), with severity, exploitation and fixes.

Ember-dynamic-render-template 1

Exploited only (KEV) →

CVE-2026-71286 Medium · 6.1 CWE-1336 Aug 5, 2026

ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString

The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.