Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-q42p-pg8m-cqh6

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-q42p-pg8m-cqh6

Prototype Pollution in handlebars Versions of `handlebars` prior to 4.0.14 are vulnerable to Prototype Pollution. Templates may alter an Objects' prototype, thus allowing an attacker to execute arbitrary code on the server. ## Recommendation For handlebars 4.1.x upgrade to 4.1.2 or later. For handlebars 4.0.x upgrade to 4.0.14 or later.

gitlab/npm/handlebars/GMS-2019-126

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in handlebars.