ROOT-APP-NPM-CVE-2026-33938 CVE-2026-33938 in @rootio/handlebars - Patched by Root

Root has patched CVE-2026-33938 in the @rootio/handlebars package for Root:npm. Multiple fixed versions available...

4coders-commons (>=0.0.1 <=0.0.2), @11ty/eleventy (=0.3.3) +3644 more potentially affected by CVE-2026-33938 via handlebars (>=4.0.0 <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1, =0.0.0-3b548b7bf6ff6554f724240da3a11be924237e6c, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33938 Source advisory: OSV:GHSA-3MFM-83XF-C92R...

CVE-2026-33938

creationtimestamp| type| source ---|---|--- 2026-03-27 18:20:44+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-3mfm-83xf-c92r 2026-03-27 21:38:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33d7jqdq2s 2026-03-27 22:25:00+00:00| seen|...