ROOT-APP-NPM-CVE-2026-33916 CVE-2026-33916 in @rootio/handlebars - Patched by Root

🗓️ 17 Jun 2026 11:54:17Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Root patched CVE-2026-33916 in the @rootio/handlebars package for Root npm; multiple fixed versions.

Reporter	Title	Published	Views	Family All 191
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	24 Apr 202617:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	29 Apr 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Cross-site Scripting (CVE-2026-33916)	3 Sep 202619:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	24 Apr 202614:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Bob	26 May 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in Handlebars	25 Jun 202610:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere eXtreme Scale is affected by multiple CVEs	7 Aug 202611:38	–	ibm
ATTACKERKB	CVE-2026-33916	27 Mar 202621:00	–	attackerkb
BDU FSTEC	The vulnerability of the resolvePartial() function in the lib/handlebars/runtime.js component, a tool for creating Handlebars templates, allows attackers to access confidential data and compromise its integrity.	8 Jul 202600:00	–	bdu_fstec

17 Jun 2026 14:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14.7

EPSS0.00276

rootio handlebars root package manager vulnerability 2026 33916