{"schemaVersion":3,"id":"CVE-2026-33938","aliases":["UBUNTU-CVE-2026-33938","DEBIAN-CVE-2026-33938","CGA-2p4h-4q94-xh66","CGA-2xjm-6xg8-25j6","CGA-3m55-88cw-2gf7","CGA-43cf-2cjx-9gh5","CGA-4cph-r7qj-3g43","CGA-5r6g-52ch-jqc6","CGA-5w64-gj8m-fmr5","CGA-6xc4-56wg-v523","CGA-cmvx-fmwm-ffjr","CGA-cwxr-6g2p-c787","CGA-fpgc-f649-4jvx","CGA-hhxv-7f4r-4gc6","CGA-hmqp-89xg-j6vj","CGA-j692-rhqv-78wx","CGA-j7r8-45c8-wj26","CGA-j7wh-m8w4-382p","CGA-mxx9-cj9j-h2g2","CGA-p23x-hf22-3qv8","CGA-pq88-5m7c-4x6g","CGA-qchq-4jx3-gjmc","CGA-vhcr-5vj2-qfxf","CGA-wpmx-4cj6-hxg4","GHSA-3mfm-83xf-c92r","CGA-232c-wm3g-vvvf","CGA-2hc4-23xq-c5cx","CGA-2p3x-55wf-rpv3","CGA-2x7c-p3qx-8vrj","CGA-376m-mrpx-whmr","CGA-3f9r-pqvr-fpr2","CGA-3rhg-264r-7jxq","CGA-3xh2-79xc-ww4m","CGA-4244-7qg2-prxf","CGA-4527-v8mv-99v5","CGA-4579-3275-7gp3","CGA-49fh-7fjh-qf8w","CGA-4mh4-p5xh-g4gv","CGA-4pjq-wj5p-f843","CGA-4q67-xm4p-fwjq","CGA-4r3v-c398-5j39","CGA-4x4g-9fh4-22pc","CGA-4xmm-pgx5-h9qr","CGA-5wv7-j8p5-g65r","CGA-63p2-98hg-92qh","CGA-64rj-p8mc-mwrc","CGA-66jp-p8g2-rh88","CGA-66vc-w3x9-9g6p","CGA-69j3-7f83-33jc","CGA-6f5r-pm6j-2qp5","CGA-6qvh-9xp4-j37p","CGA-7593-3hcc-fr9q","CGA-75pq-9r55-8cq4","CGA-78q3-9vv7-cxq5","CGA-7q9j-37rc-pq88","CGA-7qf9-v4qj-wgc7","CGA-7qjc-wf95-2q9v","CGA-7rg5-x55v-fwpc","CGA-82w2-3jq2-qrq9","CGA-8fgj-g2jp-rwch","CGA-8hw4-793q-6hvw","CGA-8pj4-6796-5qfr","CGA-8qmq-726m-8429","CGA-8xgp-f88h-4qf2","CGA-8xw8-7rvf-q8r7","CGA-92gj-9wh3-m443","CGA-97q4-39cr-6g7q","CGA-9859-vfrc-8rm9","CGA-992v-w8xw-72fq","CGA-99pp-6xgh-3q8r","CGA-9cqx-9xj8-gfjh","CGA-c27f-p5j2-7v7r","CGA-c28w-889m-3x34","CGA-c3x5-7974-2j2c","CGA-c5ph-4992-w8p5","CGA-c98m-vg8q-cm8g","CGA-f3pr-4p6j-2v7h","CGA-f4c5-585g-9x7f","CGA-f4mr-2m3f-94ph","CGA-fhqw-7qfv-558p","CGA-fm55-pq76-m2vq","CGA-gph5-f67g-vwp2","CGA-gw9m-fpxp-9cpc","CGA-h229-8r22-p3m4","CGA-h769-w2jx-7fpv","CGA-hcgr-2h93-3v6c","CGA-hfrc-w398-789p","CGA-hfvq-h9mr-8pp5","CGA-hg24-j84h-8h57","CGA-hj23-2h6r-8f43","CGA-hm47-fmf2-xq68","CGA-hp63-7m4r-3w54","CGA-hwpv-7gvr-rhh2","CGA-j5r6-w2rh-5wv2","CGA-j65j-55qq-j369","CGA-j9gf-r6cc-4hmw","CGA-jvx2-46gv-mrq6","CGA-jwpp-xp2j-gjpj","CGA-m8hr-g4fp-p73v","CGA-mj39-5c32-67p5","CGA-mp2p-rvhm-3378","CGA-mvvf-45q3-rmf3","CGA-pgq5-7r6g-369v","CGA-pjhp-5rqh-chxc","CGA-pqp5-9933-7p3c","CGA-pxv8-4m9g-wrpp","CGA-q6wq-g2r6-mvgm","CGA-q7h5-654j-fq65","CGA-qfvg-pfhr-xrwp","CGA-r27p-jqp7-4fwr","CGA-rm9g-3763-33rw","CGA-rpvr-gwhq-3cxf","CGA-rqr5-wqx4-7fp3","CGA-v5mv-g7jc-8fpp","CGA-vc7f-xgmx-gpcm","CGA-vm54-48hp-c5p3","CGA-vr8f-5q4q-7j63","CGA-w6x5-p62x-55q2","CGA-wpjf-4r35-wjq7","CGA-wvrv-7fh2-q57x","CGA-x44j-35p2-9hh6","CGA-x555-wpxr-gphq","CGA-xw8f-7q29-8h46","CGA-xx56-vhr8-26w9"],"status":"published","duplicateOf":null,"title":null,"description":"Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper overwrites `@partial-block` with a crafted Handlebars AST, a subsequent invocation of `{{> @partial-block}}` compiles and executes that AST, enabling arbitrary JavaScript execution on the server. Version 4.7.9 fixes the issue. Some workarounds are available. First, use the runtime-only build (`require('handlebars/runtime')`). The `compile()` method is  absent, eliminating the vulnerable fallback path. Second, audit registered helpers for any that write arbitrary values to context objects. Helpers  should treat context data as read-only. Third, avoid registering helpers from third-party packages (such as `handlebars-helpers`) in  contexts where templates or context data can be influenced by untrusted input.","dates":{"published":"2026-03-27T21:05:42.485Z","modified":"2026-09-04T12:04:55.157Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.1,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":5.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":5.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":5.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":5.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":5.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.1,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00843,"percentile":0.57255,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.134,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00709},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00843,"percentile":0.57255}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00843,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00843,"percentile":0.57255}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_HANDLEBARS-LANG_HANDLEBARS.JS","name":"Handlebars.Js","source":"github","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"},{"id":"CWE-843","name":"Access of Resource Using Incompatible Type ('Type Confusion')","description":"The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/843.html"},{"id":"CWE-917","name":"Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')","description":"The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/917.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-19.4","name":"gitlab-rails-ce-assets-fips-19.4","label":"gitlab-rails-ce-assets-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18","name":"kibana-8.18","label":"kibana-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-bitnami","name":"kibana-8.18-bitnami","label":"kibana-8.18-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-bitnami","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-iamguarded","name":"kibana-8.18-iamguarded","label":"kibana-8.18-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-iamguarded","purlType":"apk","versions":[{"text":"< 8.18.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"< 9.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3.152-worker","name":"langfuse-fips-3.152-worker","label":"langfuse-fips-3.152-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3.152-worker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-31","name":"nextcloud-server-31","label":"nextcloud-server-31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-32","purlType":"apk","versions":[{"text":"< 32.0.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.12-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.5-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.5.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pelias-api","name":"pelias-api","label":"pelias-api","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pelias-api","purlType":"apk","versions":[{"text":"< 7.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.14.3-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.14.3-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"py3.10-jupyterlab","name":"py3.10-jupyterlab","label":"py3.10-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.11-jupyterlab","name":"py3.11-jupyterlab","label":"py3.11-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.11-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-jupyterlab","name":"py3.12-jupyterlab","label":"py3.12-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-jupyterlab","name":"py3.13-jupyterlab","label":"py3.13-jupyterlab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rancher-api-ui","name":"rancher-api-ui","label":"rancher-api-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rancher-api-ui","purlType":"apk","versions":[{"text":"< 1.2.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-cpu-jupyter","name":"tensorflow-cpu-jupyter","label":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter","purlType":"apk","versions":[{"text":"< 2.21.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.21.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tensorflow-gpu-jupyter","name":"tensorflow-gpu-jupyter","label":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-fips","name":"tileserver-gl-fips","label":"tileserver-gl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-fips","purlType":"apk","versions":[{"text":"< 5.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ts-patch","name":"ts-patch","label":"ts-patch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ts-patch","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.5-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.5-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-32","purlType":"apk","versions":[{"text":"< 32.0.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.12-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.14.3-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.14.3-r13","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"py3.10-jupyterlab","name":"py3.10-jupyterlab","label":"py3.10-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.10-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.11-jupyterlab","name":"py3.11-jupyterlab","label":"py3.11-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.11-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.12-jupyterlab","name":"py3.12-jupyterlab","label":"py3.12-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.12-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.13-jupyterlab","name":"py3.13-jupyterlab","label":"py3.13-jupyterlab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.13-jupyterlab","purlType":"apk","versions":[{"text":"< 4.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"rancher-api-ui","name":"rancher-api-ui","label":"rancher-api-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/rancher-api-ui","purlType":"apk","versions":[{"text":"< 1.2.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ts-patch","name":"ts-patch","label":"ts-patch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ts-patch","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"node-handlebars","name":"node-handlebars","label":"node-handlebars","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-handlebars","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 3:4.7.9-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 3:4.7.9-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-handlebars","name":"node-handlebars","label":"node-handlebars","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-handlebars","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"handlebars-lang","product":"handlebars.js","name":"handlebars.js","label":"handlebars.js","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":"/vendor/handlebars-lang/handlebarsjs"},{"vendor":"handlebarsjs","product":"handlebars","name":"handlebars","label":"handlebars","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":"/vendor/handlebarsjs/handlebars"},{"vendor":"Npm","product":"handlebars","name":"handlebars","label":"handlebars","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/handlebars","purlType":"npm","versions":[{"text":"≥ 4.0.0, < 4.7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.7.9","eol":null,"hubHref":null}],"affectedCount":78,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r","label":"github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","label":"github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9","label":"github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Release Notes"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33938","label":"access.redhat.com/security/cve/CVE-2026-33938","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452525","label":"bugzilla.redhat.com/show_bug.cgi?id=2452525","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33938.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33938.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34342","label":"access.redhat.com/errata/RHSA-2026:34342","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10175","label":"access.redhat.com/errata/RHSA-2026:10175","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-33938","label":"ubuntu.com/security/CVE-2026-33938","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33938","label":"www.cve.org/CVERecord?id=CVE-2026-33938","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-33938","label":"security-tracker.debian.org/tracker/CVE-2026-33938","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33938.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33938.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33938","label":"nvd.nist.gov/vuln/detail/CVE-2026-33938","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/handlebars-lang/handlebars.js","label":"github.com/handlebars-lang/handlebars.js","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-C25F-88W6-VHFV"]},"timeline":[{"kind":"published","date":"2026-03-27T21:05:42.485Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-04T12:04:55.157Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":43,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T02:26:42.411Z","stale":false,"partial":false}}