Security: shepherdwind/velocity.js
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)GHSA-7gfh-x38p-prh3 published
Jul 19, 2026 by shepherdwindCritical -
Prototype Pollution in #set path assignmentGHSA-j658-c2gf-x6pq published
May 6, 2026 by shepherdwindHigh
Learn more about advisories related to shepherdwind/velocity.js in the GitHub Advisory Database