Skip to content
This repository has been archived by the owner on Mar 1, 2024. It is now read-only.

Prototype Pollution in handlebars #460

Open
philipjonsen opened this issue Mar 15, 2023 · 0 comments
Open

Prototype Pollution in handlebars #460

philipjonsen opened this issue Mar 15, 2023 · 0 comments

Comments

@philipjonsen
Copy link

Prototype Pollution in handlebars The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

Update to 4.7.7

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant