Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-7rx3-28cr-v5wh
  • npm/handlebars
 Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry 29 Mar
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-442j-39wm-28r2
  • npm/handlebars
 Handlebars.js has a Property Access Validation Bypass in container.lookup 29 Mar
  • Fix available
  • Severity - 3.7 (Low)
GHSA-xjpj-3mr7-gcpf
  • npm/handlebars
 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options 27 Mar
  • Fix available
  • Severity - 8.2 (High)
GHSA-xhpv-hc6g-r9c6
  • npm/handlebars
 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial 27 Mar
  • Fix available
  • Severity - 8.1 (High)
GHSA-9cx6-37pm-9jff
  • npm/handlebars
 Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation 27 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-3mfm-83xf-c92r
  • npm/handlebars
 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block 27 Mar
  • Fix available
  • Severity - 8.1 (High)
GHSA-2w6w-674q-4c4q
  • npm/handlebars
 Handlebars.js has JavaScript Injection via AST Type Confusion 27 Mar
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-2qvq-rjwj-gvw9
  • npm/handlebars
 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection 26 Mar
  • Fix available
  • Severity - 4.7 (Medium)
MAL-2025-47900
  • npm/kss-node-handlebars-builder
 Malicious code in kss-node-handlebars-builder (npm) 03 Oct 2025
  • No fix available
MAL-2025-22172
  • npm/handlebars-inline-precompile
 Malicious code in handlebars-inline-precompile (npm) 14 Aug 2025
  • No fix available
MAL-2025-26594
  • npm/modown-handlebars
 Malicious code in modown-handlebars (npm) 14 Aug 2025
  • No fix available
MAL-2025-5308
  • npm/handlebars-formatter
 Malicious code in handlebars-formatter (npm) 28 Jun 2025
  • No fix available
MAL-2024-9650
  • npm/handlebars-helper-attrs
 Malicious code in handlebars-helper-attrs (npm) 16 Oct 2024
  • No fix available
MAL-2022-2719
  • npm/ember-handlebars
 Malicious code in ember-handlebars (npm) 20 Jun 2022
  • No fix available
GHSA-765h-qjxv-5f44
  • npm/handlebars
 Prototype Pollution in handlebars 10 Feb 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-fr76-2wp8-fp92
  • npm/express-handlebars
 Insecure template handling in Express-handlebars 10 Feb 2022
  • Fix available
  • Severity - 8.6 (High)
Load more...