{"schemaVersion":3,"id":"CVE-2026-33916","aliases":["UBUNTU-CVE-2026-33916","DEBIAN-CVE-2026-33916","CGA-238w-3v2j-jm65","CGA-34m4-88gh-p7mg","CGA-3xjf-4hqq-h7q8","CGA-6xjx-rqqf-76j9","CGA-778c-jhv5-7wm8","CGA-7hhq-63f9-vvwx","CGA-8mvv-qgpp-634h","CGA-9hxh-4fxg-xfm7","CGA-9j86-35rf-vp8x","CGA-cwvc-4qwg-vhjq","CGA-f4ff-454q-r9wj","CGA-h2pc-wvwq-r9p5","CGA-j6gh-52hj-gwvm","CGA-m2x5-gvwv-gpcp","CGA-mh33-p8rh-97rf","CGA-pqm8-3xc6-f5p6","CGA-q2r6-qvg6-r35w","CGA-q4w5-9gq2-q5fg","CGA-v6vc-8xrv-2p9m","CGA-v6x2-rv9g-g5vx","CGA-vj6q-5p7q-rr3p","CGA-w9c6-v9f6-79mf","CGA-wmxr-58jx-3cw4","GHSA-2qvq-rjwj-gvw9","CGA-225f-qh65-p7cx","CGA-2gh8-wc82-jj74","CGA-2q5m-52p5-ph3f","CGA-33rf-7r9r-pmq5","CGA-36fv-m4f8-8qw8","CGA-39mj-34cg-45j2","CGA-3jv5-3q7x-qw4f","CGA-3m95-53x2-qq7x","CGA-3mvx-cp47-6gfc","CGA-3q85-c5c2-vm62","CGA-3r2q-c557-6x4x","CGA-3v87-7m3g-8rch","CGA-3wwp-447w-jfjq","CGA-46q2-qxwm-pp62","CGA-48mq-x9w5-hm74","CGA-492j-vwg7-577r","CGA-539c-vg92-wrjg","CGA-5hhr-w64r-22rc","CGA-5vpm-xgcc-v369","CGA-635m-5m32-f3mv","CGA-638v-8xh3-qxc2","CGA-646v-67mq-87mr","CGA-6f29-pwmv-r498","CGA-6gxx-cfxw-pc96","CGA-6q3w-96pm-78jc","CGA-6rmv-84x3-mcjh","CGA-6vr8-wjq3-m7wp","CGA-78f6-gwwf-g6ff","CGA-793c-577h-27w3","CGA-7f2j-4vm2-5wgh","CGA-7vc6-gjwv-mfmq","CGA-8257-89jf-5588","CGA-828x-47hf-2436","CGA-84jh-hv2j-jjvq","CGA-8ccj-22jq-9qcf","CGA-8j6f-99hq-cwvm","CGA-952w-q449-jg3j","CGA-96gr-9gf7-6rv7","CGA-9jvw-qqwg-cg4j","CGA-9mmc-cf4q-5h52","CGA-9pwh-448c-4v85","CGA-c3rw-j6qr-68h4","CGA-c5j3-r92j-9qf9","CGA-chpx-hmvh-5jg7","CGA-cjj7-fj5v-qmxq","CGA-cjpg-95m5-vx2p","CGA-cv47-8cg8-2mmj","CGA-f2f7-jgg5-x767","CGA-f38q-4m5r-wfp7","CGA-ff65-4623-ccwq","CGA-ffrx-qm9v-pmvx","CGA-fq2v-wq54-56hg","CGA-fqgj-v636-f342","CGA-g3rx-j4cw-jq3p","CGA-g4w8-ccq2-6m3q","CGA-g5fc-5j7f-8q22","CGA-gqhw-rr53-89pp","CGA-h38g-vc8h-6w4h","CGA-h4c8-fcfw-gvjr","CGA-j348-g7p7-9r7f","CGA-j8x3-7r3f-g66x","CGA-jcrc-rr2q-hfwh","CGA-m53m-4vp9-9ffh","CGA-m6fr-7fxw-vg3g","CGA-m7wc-qxhj-v6c9","CGA-m8rm-c34w-3332","CGA-mrmw-6757-pr2w","CGA-mv8q-f57x-xjg8","CGA-p3q2-c4v2-55pj","CGA-pf34-9fhj-32mp","CGA-pj29-p476-rwcx","CGA-pq76-6c3r-m36p","CGA-pr7v-m825-mmcp","CGA-q298-2rxh-7j6p","CGA-q67x-q9pg-x5vv","CGA-qfc8-7rj4-9w9p","CGA-qfpv-pp2r-93fm","CGA-qhmf-68cw-5rp6","CGA-qphw-qgqj-6j8f","CGA-r2rg-xjpm-qv9p","CGA-r3fv-j3w8-2g97","CGA-r443-8p2f-x99p","CGA-r62v-gh3m-fgp5","CGA-r6rg-7qx9-c8h6","CGA-rj7w-q43v-99xq","CGA-rqq6-4w58-rf8v","CGA-rwm6-qm9r-8w67","CGA-vcq5-hv28-mxh2","CGA-vj28-vc28-85f7","CGA-vp48-x54g-68w4","CGA-w28q-qc3v-rvc8","CGA-wj2x-78p4-q847","CGA-wm95-rh23-hm8j","CGA-x4x2-pf2f-55w7","CGA-x5jw-fv95-xf29","CGA-x789-x2rg-2cjv","CGA-x8c3-ccqc-vfjr","CGA-xcmq-vm6j-7v7m","CGA-xhhv-pfv2-27wj","CGA-xr6p-957w-g7g3"],"status":"published","duplicateOf":null,"title":null,"description":"Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `resolvePartial()` in the Handlebars runtime resolves partial names via a plain property lookup on `options.partials` without guarding against prototype-chain traversal. When `Object.prototype` has been polluted with a string value whose key matches a partial reference in a template, the polluted string is used as the partial body and rendered without HTML escaping, resulting in reflected or stored XSS. Version 4.7.9 fixes the issue. Some workarounds are available. Apply `Object.freeze(Object.prototype)` early in application startup to prevent prototype  pollution. Note: this may break other libraries, and/or use the Handlebars runtime-only build (`handlebars/runtime`), which does not compile templates  and reduces the attack surface.","dates":{"published":"2026-03-27T21:00:48.624Z","modified":"2026-03-30T15:41:36.977Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.7,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00382,"percentile":0.30709,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.10600000000000001,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00276},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00382,"percentile":0.30709}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00276,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00382,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00382,"percentile":0.30709}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_HANDLEBARS-LANG_HANDLEBARS.JS","name":"Handlebars.Js","source":"github","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-1321","name":"Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')","description":"The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.","type":"weakness","status":"Incomplete","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1321.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-19.4","name":"gitlab-rails-ce-assets-fips-19.4","label":"gitlab-rails-ce-assets-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18","name":"kibana-8.18","label":"kibana-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-bitnami","name":"kibana-8.18-bitnami","label":"kibana-8.18-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-bitnami","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-iamguarded","name":"kibana-8.18-iamguarded","label":"kibana-8.18-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-iamguarded","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"< 9.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3.152-worker","name":"langfuse-fips-3.152-worker","label":"langfuse-fips-3.152-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3.152-worker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-31","name":"nextcloud-server-31","label":"nextcloud-server-31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-32","purlType":"apk","versions":[{"text":"< 32.0.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.12-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.5-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.5.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pelias-api","name":"pelias-api","label":"pelias-api","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pelias-api","purlType":"apk","versions":[{"text":"< 7.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.14.3-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.14.3-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"py3.10-jupyterlab","name":"py3.10-jupyterlab","label":"py3.10-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.11-jupyterlab","name":"py3.11-jupyterlab","label":"py3.11-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.11-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-jupyterlab","name":"py3.12-jupyterlab","label":"py3.12-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-jupyterlab","name":"py3.13-jupyterlab","label":"py3.13-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rancher-api-ui","name":"rancher-api-ui","label":"rancher-api-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rancher-api-ui","purlType":"apk","versions":[{"text":"< 1.2.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-cpu-jupyter","name":"tensorflow-cpu-jupyter","label":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-gpu-jupyter","name":"tensorflow-gpu-jupyter","label":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl","name":"tileserver-gl","label":"tileserver-gl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl","purlType":"apk","versions":[{"text":"< 5.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-fips","name":"tileserver-gl-fips","label":"tileserver-gl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-fips","purlType":"apk","versions":[{"text":"< 5.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ts-patch","name":"ts-patch","label":"ts-patch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ts-patch","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.5-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.5-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-32","purlType":"apk","versions":[{"text":"< 32.0.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.12-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.14.3-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.14.3-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"py3.10-jupyterlab","name":"py3.10-jupyterlab","label":"py3.10-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.10-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.11-jupyterlab","name":"py3.11-jupyterlab","label":"py3.11-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.11-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.12-jupyterlab","name":"py3.12-jupyterlab","label":"py3.12-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.12-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.13-jupyterlab","name":"py3.13-jupyterlab","label":"py3.13-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.13-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"rancher-api-ui","name":"rancher-api-ui","label":"rancher-api-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/rancher-api-ui","purlType":"apk","versions":[{"text":"< 1.2.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tileserver-gl","name":"tileserver-gl","label":"tileserver-gl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tileserver-gl","purlType":"apk","versions":[{"text":"< 5.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ts-patch","name":"ts-patch","label":"ts-patch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ts-patch","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"node-handlebars","name":"node-handlebars","label":"node-handlebars","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-handlebars","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 3:4.7.9-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 3:4.7.9-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-handlebars","name":"node-handlebars","label":"node-handlebars","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-handlebars","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"handlebars-lang","product":"handlebars.js","name":"handlebars.js","label":"handlebars.js","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":"/vendor/handlebars-lang/handlebarsjs"},{"vendor":"handlebarsjs","product":"handlebars","name":"handlebars","label":"handlebars","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":"/vendor/handlebarsjs/handlebars"},{"vendor":"Npm","product":"handlebars","name":"handlebars","label":"handlebars","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/handlebars","purlType":"npm","versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":null}],"affectedCount":80,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9","label":"github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","label":"github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9","label":"github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Release Notes"]},{"url":"https://ubuntu.com/security/CVE-2026-33916","label":"ubuntu.com/security/CVE-2026-33916","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33916","label":"www.cve.org/CVERecord?id=CVE-2026-33916","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-33916","label":"security-tracker.debian.org/tracker/CVE-2026-33916","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33916.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33916.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33916","label":"nvd.nist.gov/vuln/detail/CVE-2026-33916","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23369","label":"nvd.nist.gov/vuln/detail/CVE-2021-23369","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23383","label":"nvd.nist.gov/vuln/detail/CVE-2021-23383","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/handlebars-lang/handlebars.js","label":"github.com/handlebars-lang/handlebars.js","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-5Q6V-PX36-2CXQ"]},"timeline":[{"kind":"published","date":"2026-03-27T21:00:48.624Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-30T15:41:36.977Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:54:03.255Z","stale":false,"partial":false}}