HA
Product
handlebars.java
by jknack · last CVE Sep 30, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch

Add handlebars.java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103088
7.5
1%
Sep 30
Handlebars.java before 4.5.5 allows directory traversal
Affected: 4.5.3 before 4.5.5
CVE-2026-63490
7.5
1%
Aug 20
Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass
Affected: < 4.5.3
CVE-2026-55760
7.5
1%
Jul 8
handlebars.java FileTemplateLoader Path Traversal
Affected: < 4.5.2
Showing 3