npm/handlebars: medium 4.8
Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry
Action: Upgrade handlebars to 4.7.9 or later.
npm i handlebars@4.7.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0 | 4.7.9 | - |
Fixed versions
| 4.7.9 |
Sources
- osv: GHSA-7rx3-28cr-v5wh
- https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh
- https://github.com/advisories/GHSA-765h-qjxv-5f44
- https://github.com/handlebars-lang/handlebars.js
- https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9
published · modified · JSON