| Package | Affected versions | Patched versions |
|---|---|---|
| org.webjars.bowergithub.wycats:handlebars.js | < 4.7.7 | 4.7.7 |
| org.webjars.npm:handlebars | < 4.7.7 | 4.7.7 |
| org.webjars:handlebars | < 4.7.7 | 4.7.7 |
| handlebars | < 4.7.7 | 4.7.7 |
| handlebars | < 4.7.7 | 4.7.7 |
The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free