Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
handlebarsjs handlebars vulnerabilities and exploits
(subscribe to this query)
694
VMScore
CVE-2019-20922
Handlebars prior to 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow malicious users to exhaust system resources.
Handlebarsjs Handlebars
668
VMScore
CVE-2021-23383
The package handlebars prior to 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
Handlebarsjs Handlebars
Netapp E-series Performance Analyzer -
1 Github repository
668
VMScore
CVE-2021-23369
The package handlebars prior to 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.
Handlebarsjs Handlebars
605
VMScore
CVE-2019-20920
Handlebars prior to 3.0.8 and 4.x prior to 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing malicious users to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server p...
Handlebarsjs Handlebars
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started