Approved changes feed: RSS · Atom

cpe:2.3:a:razorengine_project:razorengine:4.5.1:alpha001:*:*:*:*:*:*

part: a version: 4.5.1 update: alpha001

VendorRazorengine Project (6732aaea-daac-5db8-97aa-0dc52befd8ae)
ProductRazorengine (ccc2e703-5eea-5920-9764-cf19a2a46989)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/antaris/razorengine purl2cpe 2026-06-01 10:14:53.755884
pkg:nuget/RazorEngine purl2cpe 2026-06-01 10:14:53.755886

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-46703 vulnerable 2026-06-08 05:38:03.725104 Details available
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Published: 2022-03-06T05:29:07.000Z
Updated: 2024-08-04T05:17:41.625Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.