JavaScript

Everything Threat Times has reported about JavaScript: 3 stories, newest first. Part of our Vulnerabilities coverage.

Cyber Attacks

New prototype pollution technique enables JavaScript execution without parentheses

Threat TimesOct 9, 2026

A security researcher has demonstrated a novel method to invoke JavaScript functions by overwriting Error.prepareStackTrace, bypassing traditional syntax restrictions.

Vulnerabilities

Critical Handlebars RCE Vulnerability Bypasses Prototype Deny List

Threat TimesOct 8, 2026

A flaw in the npm Handlebars library allows attackers to execute arbitrary JavaScript by bypassing security checks via the Function constructor.

Vulnerabilities

Handlebars 4.7.9 AST Validation Bypassed in Critical Remote Code Execution Flaw

Threat TimesOct 8, 2026

A critical vulnerability in the popular Handlebars templating engine allows attackers to inject arbitrary JavaScript by bypassing recent security controls.