Repository Issue Activity (beta)

#811 Broken Syntax Doc Link & Missing Syntax file

#812 "Include" declares missing file when a filename with "." is used

#806 Release notes for v6, please?

#810 Required to All good back clearing for all seytem not good ...

#800 Unable to bundle package using Rolldown/Rollup

#805 Webpack problem with `node:` modules

#803 [Security] XSS escape bypass via with() variable shadowing of escapeFn

#802 Release notes/ changelog for v5?

#659 please remvove jake as not needed in production - fixes CVE-2021-43138

#801 What were the breaking changes in `ejs@5`?

#798 [Security] Code Injection via client-mode escapeFunction toString() (RCE)

#799 Code Injection via client-mode escapeFunction toString() (CWE-94)

#797 EJS depends on vulnerable version of minimatch (through dependency on Jake, CVE-2026-26996)

#796 Make variables from top template be accessible in all partials without explicitly passing them in includes

#795 version 4.0.1 seems to be unsupportable on browser

#742 Functions do not return embedded HTML

#656 A clean, full ES6 version of EJS, without changing the codebase

#743 Add a precompile step

#657 jsdocs

#655 Data with < or > still escaping despite tag configured otherwise

#763 uglify is not recognized

#764 async option is not true async 3.1.10

#774 [Express + EJS Template] Reload part of HTML rendered page with new elements

#782 Function to return JS object containing EJS template bindings structure.

#789 EJS configuration file