Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: handlebars-lang Clear all filters
TI-2026-68896 CVE-2026-106444 · GHSA-xw65-4hp5-5hc7

Script injection in Handlebars precompiled templates

Priority MEDIUM 55

Handlebars provides the power necessary to let users build semantic templates.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0029 Published 2026-10-06 Fixed in 4.7.10 CWE-116
TI-2021-06076 CVE-2021-23383 · GHSA-765h-qjxv-5f44

Prototype pollution in handlebars

Priority MEDIUM 56

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04506 Published 2021-05-04 Partial fix · 4.7.7 CWE-1321
TI-2021-06062 CVE-2021-23369 · GHSA-f2jv-r9rf-7988

Remote code execution (RCE) in handlebars

Priority MEDIUM 59

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07028 Published 2021-04-12 Partial fix · 4.7.7 CWE-94