GHSA-6r5x-hmgg-7h53
Remote code execution in Handlebars.js
Withdrawn ·
At a glance
- Published
- Updated
Description
Handlebars.js before 4.1.0 has Remote Code Execution (RCE)
Affected packages
| Package | Versions |
|---|---|
| npm · handlebars | introduced 0, fixed 4.1.0 |
References
- https://github.com/wycats/handlebars.js/issues/1267#issue-187151586 WEB
- https://github.com/wycats/handlebars.js/commit/edc6220d51139b32c28e51641fadad59a543ae57 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |