Read the docs
Red Hat Security Advisory

RHSA-2021:2500

Red Hat OpenShift Enterprise security and bug fix update

Released 2021-06-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2021-06062 CVE-2021-23369 · GHSA-f2jv-r9rf-7988

Remote code execution (RCE) in handlebars

Priority MEDIUM 59

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07028 Published 2021-04-12 Partial fix · 4.7.7 CWE-94
TI-2021-06076 CVE-2021-23383 · GHSA-765h-qjxv-5f44

Prototype pollution in handlebars

Priority MEDIUM 56

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04506 Published 2021-05-04 Partial fix · 4.7.7 CWE-1321