Skip to content
Sign in
5.6 Medium

CVE-2021-23369 The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling…

Description

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

Affected products and versions

Product Affected versions Fixed in
handlebars 4.7 earliest → < 4.7.7 4.7.7

Other CVEs of handlebars

The 2 CVEs of handlebars →
CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to… 5.6 Medium
Track this CVE