HA
Vendor
handlebars-lang
9
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106446 | HA handlebars.js handlebars-lang | 9.8 | Oct 6 | Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) |
| CVE-2026-106445 | HA handlebars.js handlebars-lang | 9.2 | Oct 6 | Handlebars: JavaScript Injection via Own Property Check Bypass |
| CVE-2026-106444 | HA handlebars.js handlebars-lang | 4.7 | Oct 6 | Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates |
| CVE-2026-33941 | HA handlebars.js handlebars-lang | 8.2 | Mar 27 | Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options |
| CVE-2026-33940 | HA handlebars.js handlebars-lang | 8.1 | Mar 27 | Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial |
| CVE-2026-33939 | HA handlebars.js handlebars-lang | 7.5 | Mar 27 | Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation |
| CVE-2026-33938 | HA handlebars.js handlebars-lang | 8.1 | Mar 27 | Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block |
| CVE-2026-33937 | HA handlebars.js handlebars-lang | 9.8 | Mar 27 | Handlebars.js has JavaScript Injection via AST Type Confusion |
| CVE-2026-33916 | HA handlebars.js handlebars-lang | 4.7 | Mar 27 | Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection |