Handlebars.Js Project vulnerabilities
2 vulnerabilities
Known vulnerabilities in Handlebars.Js Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Handlebars.Js2 vulnerabilities
CVE-2015-8861chainguardcode-server+76
EPSS score2.61%
The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.CVE-2019-19919chainguardcode-server+78EPSS score7.07%
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.