CVE-2015-8861
1 advisory.
npm/handlebars CVE-2015-8861: medium 6.1, EPSS 2.61%
Cross-Site Scripting in handlebars
Action: Upgrade handlebars to 4.0.0 or later.
npm i handlebars@4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-9prh-257w-9277
- https://nvd.nist.gov/vuln/detail/CVE-2015-8861
- https://github.com/wycats/handlebars.js/pull/1083
- https://blog.srcclr.com/handlebars_vulnerability_research_findings
- https://github.com/advisories/GHSA-9prh-257w-9277
- https://github.com/wycats/handlebars.js
- https://www.npmjs.com/advisories/61
- https://www.sourceclear.com/blog/handlebars_vulnerability_research_findings
- https://www.tenable.com/security/tns-2016-18
- http://www.openwall.com/lists/oss-security/2016/04/20/11
- http://www.securityfocus.com/bid/96434
CVE-2015-8861 · published · modified · JSON