{"schemaVersion":3,"id":"CVE-2026-33937","aliases":["UBUNTU-CVE-2026-33937","DEBIAN-CVE-2026-33937","CGA-22qg-f499-9xx7","CGA-2436-xmmv-x7v7","CGA-2m72-m7r9-mc47","CGA-465q-m8cq-8w49","CGA-5c4c-2p7g-59fm","CGA-73hp-68m9-3r4w","CGA-74r3-28hr-5frx","CGA-8mpp-m43q-44v9","CGA-9737-f465-mvwf","CGA-9mcv-jcwg-p9fm","CGA-cph7-43fm-8p84","CGA-cq79-vg37-gj8x","CGA-hqx7-qwpr-7f35","CGA-hrv7-56mp-29gf","CGA-hwj9-9f3c-j546","CGA-hxgh-xfc8-54m7","CGA-j3jh-4p78-fmpq","CGA-j92g-j9jh-qmmf","CGA-qvvx-55v3-8q8q","CGA-r6c6-5gvr-47g9","CGA-r9ff-rjv7-95xc","CGA-rg7r-5j5m-59qh","GHSA-2w6w-674q-4c4q","CGA-222p-wj37-5v8h","CGA-2q9j-h83g-3cjm","CGA-389p-2m8r-qrqm","CGA-3p46-pxcj-v2hm","CGA-3rh2-mf4r-464x","CGA-3v4p-rwph-xgg2","CGA-3w42-7pwm-xp95","CGA-47h3-jc4j-x4cv","CGA-4j5f-cwc9-9rgh","CGA-4rm6-f344-hhgm","CGA-4rp9-4mg3-588j","CGA-4w88-8878-g22g","CGA-4wrq-x992-g93c","CGA-54qh-rghx-g35f","CGA-58r5-wqxv-9v77","CGA-5mfp-3q9v-m999","CGA-5r9g-9f82-8px8","CGA-5x85-6qm9-vwrr","CGA-6cxh-h988-g384","CGA-6pvm-qgvr-hc2x","CGA-6vrq-9c88-jw6q","CGA-72p2-772x-ghgh","CGA-73f3-gfgv-hm8m","CGA-7592-mh93-7ph3","CGA-76gr-53pq-86xf","CGA-7hpw-2fh9-rvwm","CGA-7vc7-6gh2-jvcg","CGA-7vjm-pxm5-pc7p","CGA-846f-hp4x-h2gc","CGA-88xc-95gf-c9vx","CGA-8j8p-mgxm-gr9r","CGA-8mqj-69jp-w646","CGA-9558-cwqp-4mc2","CGA-982m-v946-gm93","CGA-98cp-5x9h-hgw5","CGA-997c-9g4m-jp25","CGA-9m8v-rc4q-jv2w","CGA-9v3v-v2ww-5jm8","CGA-c39f-pvp8-v3wx","CGA-c52x-75cx-5w5q","CGA-c5qm-523h-5php","CGA-cfmr-pfmv-696g","CGA-ffrj-r24c-7rfq","CGA-fx97-6r2v-9c2f","CGA-g257-29rc-mj3q","CGA-g8cv-jcrm-f8mq","CGA-g9qj-gx9v-g92c","CGA-g9r9-p2fp-57rr","CGA-gh9x-4fx6-jx7m","CGA-gm2q-m9j2-55wc","CGA-gvm7-vc42-6cx2","CGA-gwpm-9mr9-97f4","CGA-h285-7x24-4m98","CGA-h3r4-wvgw-c7h5","CGA-h89p-g463-pq54","CGA-h9cf-qq27-mhhf","CGA-hpfq-5v6h-f642","CGA-hwxh-j3mw-f4c7","CGA-j3jh-4jmj-3598","CGA-j5vh-c76w-36w3","CGA-j7j4-pqrm-8xpm","CGA-jhgm-998c-4q5v","CGA-jpm4-h8hv-5xg2","CGA-jwm3-83v9-845p","CGA-m5v9-6535-5px4","CGA-m7x6-2q93-8wxh","CGA-m8gp-jfr2-4hj4","CGA-m8rm-5mm5-q3fh","CGA-m9cc-c69r-45h3","CGA-mh34-x6f7-9x8m","CGA-mhvr-g383-2q9w","CGA-mjpm-2wjh-99vm","CGA-mw8h-4j6p-p88x","CGA-p4g5-6ccf-h45m","CGA-pwr2-2q6c-g55c","CGA-q32c-vvg4-m9j5","CGA-q3fc-58rc-ph65","CGA-q74h-6q5g-j3r2","CGA-q8qf-48rr-3q7p","CGA-qf3r-vcpm-9w9x","CGA-qgxx-gh9h-frwp","CGA-qhg7-7486-rr28","CGA-qmwx-qfhf-78v7","CGA-qvpx-4f32-8w57","CGA-r2vw-pp7p-q86q","CGA-r92x-qjj7-7x5r","CGA-rm2r-q9hg-c28v","CGA-rmx2-28w2-3xm8","CGA-v2f8-vh3p-7w83","CGA-v43w-7264-73vj","CGA-v4p5-grmp-m9x9","CGA-v5gp-v2q7-q77q","CGA-vv9m-h799-v5vx","CGA-vwvq-7q24-qx95","CGA-w293-98fq-r425","CGA-wj3m-826r-5cm8","CGA-x7qj-fm34-4qvj","CGA-xwf8-h8ch-v99h","CGA-xxx6-6g62-m52c"],"status":"published","duplicateOf":null,"title":null,"description":"Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST object in addition to a template string. The `value` field of a `NumberLiteral` AST node is emitted directly into the generated JavaScript without quoting or sanitization. An attacker who can supply a crafted AST to `compile()` can therefore inject and execute arbitrary JavaScript, leading to Remote Code Execution on the server. Version 4.7.9 fixes the issue. Some workarounds are available. Validate input type before calling `Handlebars.compile()`; ensure the argument is always a  `string`, never a plain object or JSON-deserialized value. Use the Handlebars runtime-only build (`handlebars/runtime`) on the server if templates are pre-compiled at build time; `compile()` will be unavailable.","dates":{"published":"2026-03-27T21:03:46.748Z","modified":"2026-09-04T12:04:45.273Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01736,"percentile":0.77336,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.032000000000000084,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01704},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01736,"percentile":0.77336}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01704,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01736,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01736,"percentile":0.77336}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_HANDLEBARS-LANG_HANDLEBARS.JS","name":"Handlebars.Js","source":"github","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"},{"id":"CWE-843","name":"Access of Resource Using Incompatible Type ('Type Confusion')","description":"The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/843.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-19.4","name":"gitlab-rails-ce-assets-fips-19.4","label":"gitlab-rails-ce-assets-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18","name":"kibana-8.18","label":"kibana-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-bitnami","name":"kibana-8.18-bitnami","label":"kibana-8.18-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-bitnami","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-iamguarded","name":"kibana-8.18-iamguarded","label":"kibana-8.18-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-iamguarded","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"< 9.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3.152-worker","name":"langfuse-fips-3.152-worker","label":"langfuse-fips-3.152-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3.152-worker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-31","name":"nextcloud-server-31","label":"nextcloud-server-31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-32","purlType":"apk","versions":[{"text":"< 32.0.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.12-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.5-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.5.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pelias-api","name":"pelias-api","label":"pelias-api","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pelias-api","purlType":"apk","versions":[{"text":"< 7.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.14.3-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.14.3-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"py3.10-jupyterlab","name":"py3.10-jupyterlab","label":"py3.10-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.11-jupyterlab","name":"py3.11-jupyterlab","label":"py3.11-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.11-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-jupyterlab","name":"py3.12-jupyterlab","label":"py3.12-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-jupyterlab","name":"py3.13-jupyterlab","label":"py3.13-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rancher-api-ui","name":"rancher-api-ui","label":"rancher-api-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rancher-api-ui","purlType":"apk","versions":[{"text":"< 1.2.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-cpu-jupyter","name":"tensorflow-cpu-jupyter","label":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-gpu-jupyter","name":"tensorflow-gpu-jupyter","label":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-fips","name":"tileserver-gl-fips","label":"tileserver-gl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-fips","purlType":"apk","versions":[{"text":"< 5.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ts-patch","name":"ts-patch","label":"ts-patch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ts-patch","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.5-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.5-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-32","purlType":"apk","versions":[{"text":"< 32.0.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.12-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.14.3-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.14.3-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"py3.10-jupyterlab","name":"py3.10-jupyterlab","label":"py3.10-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.10-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.11-jupyterlab","name":"py3.11-jupyterlab","label":"py3.11-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.11-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.12-jupyterlab","name":"py3.12-jupyterlab","label":"py3.12-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.12-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.13-jupyterlab","name":"py3.13-jupyterlab","label":"py3.13-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.13-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"rancher-api-ui","name":"rancher-api-ui","label":"rancher-api-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/rancher-api-ui","purlType":"apk","versions":[{"text":"< 1.2.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ts-patch","name":"ts-patch","label":"ts-patch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ts-patch","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"node-handlebars","name":"node-handlebars","label":"node-handlebars","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-handlebars","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 3:4.7.9-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 3:4.7.9-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-handlebars","name":"node-handlebars","label":"node-handlebars","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-handlebars","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"handlebars-lang","product":"handlebars.js","name":"handlebars.js","label":"handlebars.js","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":"/vendor/handlebars-lang/handlebarsjs"},{"vendor":"handlebarsjs","product":"handlebars","name":"handlebars","label":"handlebars","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":"/vendor/handlebarsjs/handlebars"},{"vendor":"Npm","product":"handlebars","name":"handlebars","label":"handlebars","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/handlebars","purlType":"npm","versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":null}],"affectedCount":78,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q","label":"github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","label":"github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9","label":"github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Release Notes"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33937","label":"access.redhat.com/security/cve/CVE-2026-33937","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452523","label":"bugzilla.redhat.com/show_bug.cgi?id=2452523","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33937.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33937.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34342","label":"access.redhat.com/errata/RHSA-2026:34342","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10175","label":"access.redhat.com/errata/RHSA-2026:10175","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-33937","label":"ubuntu.com/security/CVE-2026-33937","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33937","label":"www.cve.org/CVERecord?id=CVE-2026-33937","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-33937","label":"security-tracker.debian.org/tracker/CVE-2026-33937","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33937.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33937.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33937","label":"nvd.nist.gov/vuln/detail/CVE-2026-33937","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/handlebars-lang/handlebars.js","label":"github.com/handlebars-lang/handlebars.js","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-CFX6-H9X2-PPM6"]},"timeline":[{"kind":"published","date":"2026-03-27T21:03:46.748Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-04T12:04:45.273Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:52:01.632Z","stale":false,"partial":false}}