Vulnerabilities > Handlebarsjs

DATE CVE VULNERABILITY TITLE RISK
2021-05-04 CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
network
low complexity
handlebarsjs netapp
7.5
2021-04-12 CVE-2021-23369 Unspecified vulnerability in Handlebarsjs Handlebars
The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.
network
low complexity
handlebarsjs
7.5
2020-09-30 CVE-2019-20922 Infinite Loop vulnerability in Handlebarsjs Handlebars
Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching.
network
low complexity
handlebarsjs CWE-835
7.8
2020-09-30 CVE-2019-20920 Code Injection vulnerability in Handlebarsjs Handlebars
Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution.
6.8