Debian/node-handlebars: high 8.1
Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbi
Action: Upgrade node-handlebars to 3:4.5.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:4.5.3-1 | - |
Fixed versions
| 3:4.5.3-1 |
Sources
- osv: DEBIAN-CVE-2019-20920#Debian:14/node-handlebars
- https://security-tracker.debian.org/tracker/CVE-2019-20920
published · modified · JSON