Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
handlebarsjs handlebars vulnerabilities and exploits
(subscribe to this query)
694
VMScore
CVE-2019-20922
Handlebars prior to 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow malicious users to exhaust system resources.
Handlebarsjs Handlebars
668
VMScore
CVE-2021-23383
The package handlebars prior to 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
Handlebarsjs Handlebars
Netapp E-series Performance Analyzer -
1 Github repository
668
VMScore
CVE-2021-23369
The package handlebars prior to 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.
Handlebarsjs Handlebars
605
VMScore
CVE-2019-20920
Handlebars prior to 3.0.8 and 4.x prior to 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing malicious users to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server p...
Handlebarsjs Handlebars
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started