Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Handlebars HIGH 8.2
CVE-2026-33941

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler (`bin/…

Fix: 4.7.9+
Fix from $1,950 2026-03-27
Handlebars HIGH 8.1
CVE-2026-33940

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, a crafted object placed in the templa…

Fix: 4.7.9+
Fix from $1,950 2026-03-27
Handlebars HIGH 7.5
CVE-2026-33939

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains d…

Fix: 4.7.9+
Fix from $1,950 2026-03-27
Handlebars CRITICAL 9.8
CVE-2026-33937

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-…

Fix: 4.7.9+
Fix from $2,300 2026-03-27
Handlebars HIGH 8.1
CVE-2026-33938

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable…

Fix: 4.7.9+
Fix from $1,950 2026-03-27
Handlebars CRITICAL 9.8
CVE-2021-23383

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from a…

Fix: 4.7.7+
Fix from $2,300 2021-05-04
Handlebars CRITICAL 9.8
CVE-2021-23369EPSS 7%

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates comin…

Fix: 4.7.7+
Fix from $2,300 2021-04-12
Handlebars HIGH 7.5
CVE-2019-20922

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop …

Fix: 4.4.5+
Fix from $1,950 2020-09-30
Handlebars HIGH 8.1
CVE-2019-20920

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allow…

Fix: 3.0.8 / 4.5.3+
Fix from $1,950 2020-09-30