Browse CVEs

HIGH 8.2 CVE-2026-33941 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler (`bin/… Handlebars 4.7.9+ Fix from $1,9502026-03-27 HIGH 8.1 CVE-2026-33940 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, a crafted object placed in the templa… Handlebars 4.7.9+ Fix from $1,9502026-03-27 HIGH 7.5 CVE-2026-33939 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains d… Handlebars 4.7.9+ Fix from $1,9502026-03-27 CRITICAL 9.8 CVE-2026-33937 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-… Handlebars 4.7.9+ Fix from $2,3002026-03-27 HIGH 8.1 CVE-2026-33938 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable… Handlebars 4.7.9+ Fix from $1,9502026-03-27 CRITICAL 9.8 CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from a… Handlebars 4.7.7+ Fix from $2,3002021-05-04 CRITICAL 9.8 CVE-2021-23369EPSS 7% The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates comin… Handlebars 4.7.7+ Fix from $2,3002021-04-12 HIGH 7.5 CVE-2019-20922 Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop … Handlebars 4.4.5+ Fix from $1,9502020-09-30 HIGH 8.1 CVE-2019-20920 Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allow… Handlebars 3.0.8 / 4.5.3+ Fix from $1,9502020-09-30