Remote code execution in Handlebars.js

GHSA-6r5x-hmgg-7h53

Published Jul 15, 2019 · Modified Dec 20, 2019

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Handlebars.js before 4.1.0 has Remote Code Execution (RCE)

References

WEB https://github.com/wycats/handlebars.js/issues/1267#issue-187151586
WEB https://github.com/wycats/handlebars.js/commit/edc6220d51139b32c28e51641fadad59a543ae57

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

Remote code execution in Handlebars.js

Description

References

More npm vulnerabilities

Start Securing