| Handlebars: JavaScript Injection via Own Property Check BypassCVE-2026-106445 · GHSA-P8WG-VRV2-V86F |
handlebarsNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled TemplatesCVE-2026-106444 · GHSA-XW65-4HP5-5HC7 |
handlebars |
npm |
متوسط
|
اصلاح گزارش شده |
|
| Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)CVE-2026-106446 · GHSA-8R5X-FM3F-WHWJ |
handlebarsNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template CompilationCVE-2026-33939 · GHSA-9CX6-37PM-9JFF |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and OptionsCVE-2026-33941 · GHSA-XJPJ-3MR7-GCPF |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partialCVE-2026-33940 · GHSA-XHPV-HC6G-R9C6 |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist EntryGHSA-7RX3-28CR-V5WH |
handlebars |
npm |
متوسط
|
اصلاح گزارش شده |
|
| Handlebars.js has a Property Access Validation Bypass in container.lookupGHSA-442J-39WM-28R2 |
handlebars |
npm |
کم
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-blockCVE-2026-33938 · GHSA-3MFM-83XF-C92R |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection via AST Type ConfusionCVE-2026-33937 · GHSA-2W6W-674Q-4C4Q |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Handlebars.js has Prototype Pollution Leading to XSS through Partial Template InjectionCVE-2026-33916 · GHSA-2QVQ-RJWJ-GVW9 |
handlebarsCryostat 4/handlebars |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Prototype Pollution in handlebarsCVE-2019-19919 · GHSA-W457-6Q6X-CGP9 |
handlebarsRed Hat OpenShift Container Platform 3.11/kibana |
npmRed HatRubyGems |
بحرانی
|
اصلاح گزارش شده |
|
| Remote code execution in handlebars when compiling templatesCVE-2021-23369 · GHSA-F2JV-R9RF-7988 |
org.webjars.bowergithub.wycats:handlebars.jsorg.webjars.npm:handlebars |
MavennpmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Prototype Pollution in handlebarsGHSA-G9R4-XPMJ-MJ65 |
handlebars |
npm |
زیاد
|
اصلاح گزارش شده |
|
| Prototype Pollution in handlebarsCVE-2021-23383 · GHSA-765H-QJXV-5F44 |
handlebarsOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Arbitrary Code Execution in handlebarsGHSA-Q2C6-C6PM-G3GH |
handlebars |
npm |
زیاد
|
اصلاح گزارش شده |
|
| Arbitrary Code Execution in handlebarsGHSA-2CF5-4W76-R9QV |
handlebars |
npm |
زیاد
|
اصلاح گزارش شده |
|
| Prototype Pollution in handlebarsGHSA-Q42P-PG8M-CQH6 |
handlebars |
npm |
زیاد
|
اصلاح گزارش شده |
|
| Cross-Site Scripting in handlebarsCVE-2015-8861 · GHSA-9PRH-257W-9277 |
handlebars |
npm |
متوسط
|
اصلاح گزارش شده |
|
| Arbitrary Code Execution in HandlebarsCVE-2019-20920 · GHSA-3CQR-58RM-57F8 |
handlebarsOpenShift Service Mesh 1/servicemesh-grafana |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
