Mustache Project maintains a lightweight templating library that is widely embedded across web applications and frameworks, where its templating mechanism creates a focused vulnerability surface around improper code generation and template-injection handling. The recurring weakness classes—code injection and improper neutralization of special elements in template engines—reflect the inherent risks of dynamic template processing and are characteristic of this class of utility software. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Mustache Project over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-0323HIGH Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1. | Jan 21, 2022 | 8.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Mustache Project.
Media articles that mention a CVE ID that affects a product developed by Mustache Project — matched by CVE ID, not by vendor name.