Vulnerabilities in jknack

3 results

CVE-2026-103088HIGHHandlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-6349EPSS 0.7%CVE-2026-63490HIGHHandlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypassEPSS 0.7%CVE-2026-55760HIGHhandlebars.java FileTemplateLoader Path TraversalEPSS 0.5%