Login Request a demo
HA
Product
Handlebars.js
by Handlebars.js Project · last CVE Dec 20, 2019
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Handlebars.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19919
9.8
7%
Dec 20
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution
Affected: 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; 1.0.11; +34 more
CVE-2015-8861
6.1
3%
Jan 23
The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted
Affected: before 4.0.0
Showing 2