Debian/node-handlebars: critical 9.8
The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
Action: Upgrade node-handlebars to 3:4.7.6+~4.1.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:4.7.6+~4.1.0-2 | - |
Fixed versions
| 3:4.7.6+~4.1.0-2 |
Sources
- osv: DEBIAN-CVE-2021-23383#Debian:13/node-handlebars
- https://security-tracker.debian.org/tracker/CVE-2021-23383
published · modified · JSON