Debian/node-handlebars: critical 9.8
The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
Action: Upgrade node-handlebars to 3:4.7.6+~4.1.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:4.7.6+~4.1.0-2 | - |
Fixed versions
| 3:4.7.6+~4.1.0-2 |
Sources
published · modified · JSON