UNKNOWN npm
Denial of Service in handlebars
GHSA-f52g-6jhx-586p
Published ยท Modified
Description
Affected versions of handlebars are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.
Recommendation
Upgrade to version 4.4.5 or later.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes