Shepherdwind Velocity.js — known CVE vulnerabilities

Every CVE whose affected-product data names Shepherdwind Velocity.js, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-44966 — CVSS 8.3 (high): Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution…