Handlebarsjs Handlebars 4.7.6 for Node.js

CPE Details

Handlebarsjs Handlebars 4.7.6 for Node.js
4.7.6
2020-10-02
15h12 +00:00
2020-10-02
15h12 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:handlebarsjs:handlebars:4.7.6:*:*:*:*:node.js:*:*

Informations

Vendor

handlebarsjs

Product

handlebars

Version

4.7.6

Target Software

node.js

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-23383 2021-05-04 08h35 +00:00 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
9.8
Critical
CVE-2021-23369 2021-04-12 13h10 +00:00 The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.
9.8
Critical