npm/express-handlebars CVE-2021-32820: high 8.6, EPSS 15.74%
Insecure template handling in Express-handlebars
Action: Upgrade express-handlebars to 5.3.1 or later.
npm i express-handlebars@5.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.1 | - |
Fixed versions
| 5.3.1 |
Sources
- osv: GHSA-fr76-2wp8-fp92
- https://nvd.nist.gov/vuln/detail/CVE-2021-32820
- https://github.com/express-handlebars/express-handlebars/pull/163
- https://github.com/express-handlebars/express-handlebars/commit/78c47a235c4ad7bc2674bddd8ec2721567ed8c72
- https://github.com/express-handlebars/express-handlebars#danger-
- https://github.com/express-handlebars/express-handlebars/blob/78c47a235c4ad7bc2674bddd8ec2721567ed8c72/README.md#danger-
- https://securitylab.github.com/advisories/GHSL-2021-018-express-handlebars
- https://www.npmjs.com/package/express-handlebars
CVE-2021-32820 · published · modified · JSON