Vulnerabilities in handlebars-lang

6 results

Vexday analysis

Handlebars-lang possui 6 CVEs catalogadas, com 1 crítica, mas nenhuma sob exploração ativa no momento. A fraqueza dominante é injeção de código (CWE-94), padrão em motores de template, e não há divulgações recentes que elevem a urgência tática. O risco permanece moderado e estável, sem pressão imediata de patch.

CVE-2026-33937CRITICALHandlebars.js has JavaScript Injection via AST Type ConfusionEPSS 1.7%CVE-2026-33938HIGHHandlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-blockEPSS 0.7%CVE-2026-33940HIGHHandlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partialEPSS 0.7%CVE-2026-33939HIGHHandlebars.js has Denial of Service via Malformed Decorator Syntax in Template CompilationEPSS 0.6%CVE-2026-33941HIGHHandlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and OptionsEPSS 0.3%CVE-2026-33916MEDIUMHandlebars.js has Prototype Pollution Leading to XSS through Partial Template InjectionEPSS 0.3%