Cx3972335c-f90e @ Npm-handlebars-4.0.12

[Svetlana-github]

Vulnerable Package issue exists @ Npm-handlebars-4.0.12 in branch main

The package handlebars before 4.3.0 is vulnerable to remote code execution.
The function blockvalue in the file lib/handlebars/compiler/javascript-compiler.js does not have protection from
calling the helpers helperMisssing and blockHelperMissing directly. This flaw can allow altering of an Object's prototypes leading to prototype pollution. Due to this flaw, an attacker can fully compromise the system.

Namespace: Svetlana-github
Repository: test
Repository Url: https://github.com/Svetlana-github/test
CxAST-Project: Svetlana-github/test
CxAST platform scan: 8821ba41-d324-41fa-8053-d13dfc156a43
Branch: main
Application: test
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1321

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: LOW
Availability impact: LOW
Remediation Upgrade Recommendation: 4.7.7

---

References
Issue
Issue
Pull request
Commit
Release Note