handlebarsjs kayıtları
handlebarsjs üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2021-23369Kavram kanıtı | Remote Code Execution (RCE)handlebarsjs · handlebars | Kritik9,8 | — | %7,0 | 12 Nis 2021 |
40Planlayın | CVE-2021-23383Kavram kanıtı | The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates comihandlebarsjs · handlebars · CWE-1321 | Kritik9,8 | — | %4,5 | 4 May 2021 |
40Planlayın | CVE-2026-33937Kavram kanıtı | Handlebars.js has JavaScript Injection via AST Type Confusionhandlebarsjs · handlebars · CWE-94 | Kritik9,8 | — | %1,7 | 27 Mar 2026 |
33İzleyin | CVE-2019-20920İstismar yok | Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution.handlebarsjs · handlebars · CWE-94 | Yüksek8,1 | — | %3,2 | 30 Eyl 2020 |
32İzleyin | CVE-2026-33938İstismar yok | Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-blockhandlebarsjs · handlebars · CWE-94 | Yüksek8,1 | — | %0,8 | 27 Mar 2026 |
32İzleyin | CVE-2026-33940İstismar yok | Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partialhandlebarsjs · handlebars · CWE-94 | Yüksek8,1 | — | %0,8 | 27 Mar 2026 |
32İzleyin | CVE-2026-33941İstismar yok | Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Optionshandlebarsjs · handlebars · CWE-79 | Yüksek8,2 | — | %0,2 | 27 Mar 2026 |
31İzleyin | CVE-2019-20922İstismar yok | Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching.handlebarsjs · handlebars · CWE-400 | Yüksek7,5 | — | %3,7 | 30 Eyl 2020 |
30İzleyin | CVE-2026-33939İstismar yok | Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilationhandlebarsjs · handlebars · CWE-754 | Yüksek7,5 | — | %0,8 | 27 Mar 2026 |
18İzleyin | CVE-2026-33916İstismar yok | Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injectionhandlebarsjs · handlebars · CWE-79 | Orta4,7 | — | %0,4 | 27 Mar 2026 |
- CVE-2021-2336941Planlayın
Remote Code Execution (RCE)
KritikCVSS 9,8Kavram kanıtıEPSS %7handlebarsjs · handlebars12 Nis 2021
- CVE-2021-2338340Planlayın
The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates comi
KritikCVSS 9,8Kavram kanıtıEPSS %5handlebarsjs · handlebars4 May 2021
- CVE-2026-3393740Planlayın
Handlebars.js has JavaScript Injection via AST Type Confusion
KritikCVSS 9,8Kavram kanıtıEPSS %2handlebarsjs · handlebars27 Mar 2026
- CVE-2019-2092033İzleyin
Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution.
YüksekCVSS 8,1İstismar yokEPSS %3handlebarsjs · handlebars30 Eyl 2020
- CVE-2026-3393832İzleyin
Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
YüksekCVSS 8,1İstismar yokEPSS %1handlebarsjs · handlebars27 Mar 2026
- CVE-2026-3394032İzleyin
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
YüksekCVSS 8,1İstismar yokEPSS %1handlebarsjs · handlebars27 Mar 2026
- CVE-2026-3394132İzleyin
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
YüksekCVSS 8,2İstismar yokEPSS %0handlebarsjs · handlebars27 Mar 2026
- CVE-2019-2092231İzleyin
Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching.
YüksekCVSS 7,5İstismar yokEPSS %4handlebarsjs · handlebars30 Eyl 2020
- CVE-2026-3393930İzleyin
Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
YüksekCVSS 7,5İstismar yokEPSS %1handlebarsjs · handlebars27 Mar 2026
- CVE-2026-3391618İzleyin
Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
OrtaCVSS 4,7İstismar yokEPSS %0handlebarsjs · handlebars27 Mar 2026