All pull requests

Pull requests

• Complete Prototype Pollution to RCE Security Fix (#3414)

  #3477·Ayoub-glitsh opened Oct 13, 2026·

  ·
  1

• fix(code-gen): guard tag.code reads against prototype pollution (#3414)

  #3476·DHDHLZ opened Sep 8, 2026·

  ·

• Fix pug_debug_sources when includeSources contain Buffers

  #3474·Hashim1999164 opened Jul 22, 2026·3 tasks done·

  ·
  1

  3

• fix: escape attribute keys in html-format codegen (security hardening)

  #3472·rvzsec opened Jul 1, 2026·

  ·
  2

• fix(runtime): serialize BigInt attribute values instead of throwing

  #3471·chatman-media opened Jun 20, 2026·

  ·
  1

  1

• fix: guard AST node property lookups against prototype pollution (fixes #3414)

  #3470·Ayoub-glitsh opened Apr 29, 2026·

  ·
  2

• test(error.reporting): Fix test using outdated error message

  #3466·Zearin opened Feb 5, 2026Contributor·

  ·
  1

• Docs: clarify maintenance status of pug-cli in README

  #3465·Ishiezz opened Nov 23, 2025·

  ·
  1

  1

• Fix(lexer): prevent false positive matching of 'of' keyword in string…

  #3464·codervipul775 opened Nov 9, 2025·

  ·
  1

• Fix build status badge

  #3459·spenserblack opened Apr 28, 2025·

  ·
  1

• use latest Node versions in workflows

  #3457·OiYouYeahYou opened Mar 20, 2025·

  ·
  1

• Update the classes to use the new class syntax

  #3456·OiYouYeahYou opened Mar 20, 2025·

  ·
  1

• Fix to address #3263 and #3447 for "in" usage

  #3448·fpereira1 opened Oct 20, 2024·

  ·
  2

  1

• Update README.md

  #3440·opensourceame opened Jul 10, 2024·

  ·
  2

• fix unit test errors

  #3429·MrJithil opened Mar 4, 2024·

  ·
  1

• add dynamic include feature

  #3413·MrJithil opened May 12, 2023·

  ·
  2

• docs: fix simple typo, depenendencies -> dependencies

  #3409·timgates42 opened Apr 1, 2023Contributor·

  ·
  1

• issue-3401: pug-walker doesn't provide access to parent node.

  #3402·ibrahimra7al opened Dec 11, 2022·

  ·
  1

  1

• deploy

  #3384·j0pgrm opened Jul 19, 2022·

  ·
  1

• fix: fix Generated debug_sources are node Buffers and fail pug_rethrow

  #3378·hanin77 opened Jun 12, 2022·

  ·
  1

• [pug-lexer] Tailwind classes support

  #3373·FlameArt opened May 11, 2022·

  ·
  7

• Convert parser to es class

  #3368·jimmywarting opened Apr 15, 2022·

  ·
  1

• Add funding key to package.json

  #3365·mondeja opened Mar 15, 2022·

  ·
  2

• Add missing inline tags

  #3346·edemaine opened Oct 19, 2021·

  ·
  1

• The successor of jade4j ist pug4j.

  #3344·chbloemer opened Aug 30, 2021·

  ·
  1