Velocity.Js CVE Vulnerabilities

By Shepherdwind — 1 known vulnerabilities

Critical
0
High
1
Medium
0
Low
0
None
0

All Velocity.Js CVEs

Recent Highest Score Oldest
CVE-2026-44966
8.3 high

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of #set directives in Velocity templates. If an application renders a template controlled

May 26, 2026