HP
Vendor
Handlebars.js Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-19919 | HA Handlebars.js Handlebars.js Project | 9.8 | Dec 20 | Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution |
| CVE-2015-8861 | HA Handlebars.js Handlebars.js Project | 6.1 | Jan 23 | The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted |