RazorEngine
RazorEngine - A Templating Engine based on the Razor parser.
Activity
- Latest release
- 9y ago
- Total releases
- 84
- Cadence
- ~daily
- Last 12 months
- 0
Details
- First release
- Jan 22, 2011
| Version | Released | |
|---|---|---|
4.5.1-alpha001
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.10.1-alpha001
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.5.0-rc1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.10.0
minor
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.4.3-rc1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.9.3
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.4.2-rc1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.9.2
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.9.1
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.4.1-rc1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.4.0-rc1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.9.0
minor
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.3.2-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.8.2
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.3.1-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.8.1
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.3.0-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.8.0
minor
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.7-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.7
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.6-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.6
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.5-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.5
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.5-beta2
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.5-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.4-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.4
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.3-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.3
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.2-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.2
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.1-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.0-beta3
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.1-alpha1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.0-beta2
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.0
minor
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.2.0-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.7.0-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.1.6-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.6
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.6-beta2
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.6-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.1.5-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.5
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.5-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.1.4-beta1
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.4
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
4.1.3-beta2
pre
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev | ||
3.6.3
patch
1 CVE
CVE-2021-46703
GHSA-ph3v-2hq5-5qfq
Mar 07, 2022
Code injection in RazorEngine
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Affected versions
2.1.0
3.0.0
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.1.0
3.10.0
3.10.1-alpha001
3.2.0
+ 72 more Show less
3.3.0
3.4.0
3.4.1
3.4.2
3.5.0
3.5.0-beta1
3.5.0-beta2
3.5.0-beta3
3.5.1
3.5.2
3.5.3
3.6.0
3.6.1
3.6.2
3.6.3
3.6.3-beta1
3.6.3-beta2
3.6.4
3.6.5
3.6.5-beta1
3.6.6
3.6.6-beta1
3.6.6-beta2
3.7.0
3.7.0-beta1
3.7.1-alpha1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.5-beta1
3.7.5-beta2
3.7.6
3.7.7
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
3.9.2
3.9.3
4.0.0-beta1
4.0.0-beta2
4.0.1-beta1
4.0.2-beta1
4.0.3-beta1
4.1.0-beta1
4.1.1-beta1
4.1.2-beta1
4.1.3-beta2
4.1.4-beta1
4.1.5-beta1
4.1.6-beta1
4.2.0-beta1
4.2.0-beta2
4.2.0-beta3
4.2.1-beta1
4.2.2-beta1
4.2.3-beta1
4.2.4-beta1
4.2.5-beta1
4.2.6-beta1
4.2.7-beta1
4.3.0-beta1
4.3.1-beta1
4.3.2-beta1
4.4.0-rc1
4.4.1-rc1
4.4.2-rc1
4.4.3-rc1
4.5.0-rc1
4.5.1-alpha001
References Updated Mar 26, 2025 · Source: OSV.dev |