{"action":"Upgrade express-handlebars to 5.3.1 or later.","affected":[{"fixed":"5.3.1","introduced":"0"}],"component":"express-handlebars","cve_ids":["CVE-2021-32820"],"ecosystem":"npm","epss":0.15743,"exploited":false,"fixed_versions":["5.3.1"],"ghsa_id":"GHSA-fr76-2wp8-fp92","id":"tcs_01M5KFP5C4VVT7HXWRP4P40VJJ","modified_at":"2023-12-06T01:01:16.096472Z","published_at":"2022-02-10T23:35:21Z","references":["https://osv.dev/vulnerability/GHSA-fr76-2wp8-fp92","https://nvd.nist.gov/vuln/detail/CVE-2021-32820","https://github.com/express-handlebars/express-handlebars/pull/163","https://github.com/express-handlebars/express-handlebars/commit/78c47a235c4ad7bc2674bddd8ec2721567ed8c72","https://github.com/express-handlebars/express-handlebars#danger-","https://github.com/express-handlebars/express-handlebars/blob/78c47a235c4ad7bc2674bddd8ec2721567ed8c72/README.md#danger-","https://securitylab.github.com/advisories/GHSL-2021-018-express-handlebars","https://www.npmjs.com/package/express-handlebars"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-fr76-2wp8-fp92","url":"https://osv.dev/vulnerability/GHSA-fr76-2wp8-fp92"}],"summary":"Insecure template handling in Express-handlebars"}