Vulnerabilities
Critical Handlebars RCE Vulnerability Bypasses Prototype Deny List
A flaw in the npm Handlebars library allows attackers to execute arbitrary JavaScript by bypassing security checks via the Function constructor.
Handlebars
Everything Threat Times has reported about Handlebars: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Handlebars 4.7.9 AST Validation Bypassed in Critical Remote Code Execution Flaw
A critical vulnerability in the popular Handlebars templating engine allows attackers to inject arbitrary JavaScript by bypassing recent security controls.