Skip to content
This repository was archived by the owner on Mar 1, 2024. It is now read-only.

Prototype Pollution in handlebars #460

Open
philipjonsen opened this issue Mar 15, 2023 · 0 comments
Open

Prototype Pollution in handlebars #460

philipjonsen opened this issue Mar 15, 2023 · 0 comments

Comments

@philipjonsen
Copy link

Prototype Pollution in handlebars The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

Update to 4.7.7

# for free to subscribe to this conversation on GitHub. Already have an account? #.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant