CVE-2026-55760 handlebars.java FileTemplateLoader Path Traversal

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

com.github.jknack:handlebars-guava-cache (3.0.0), com.github.jknack:handlebars-helpers (3.0.0) +20 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (3.0.0)

com.github.jknack:handlebars MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 3.0.0 - com.github.jknack:handlebars-helpers 3.0.0 -...

com.github.jknack:handlebars-guava-cache (2.2.3), com.github.jknack:handlebars-helpers (2.2.3) +18 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.2.3)

com.github.jknack:handlebars MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.2.3 - com.github.jknack:handlebars-helpers 2.2.3 -...

com.github.jknack:handlebars-guava-cache (2.2.1), com.github.jknack:handlebars-helpers (2.2.1) +9 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.2.1)

com.github.jknack:handlebars MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.2.1 - com.github.jknack:handlebars-helpers 2.2.1 -...

com.github.jknack:handlebars-guava-cache (2.3.2), com.github.jknack:handlebars-helpers (2.3.2) +9 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.3.2)

com.github.jknack:handlebars MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.3.2 - com.github.jknack:handlebars-helpers 2.3.2 -...

com.github.jknack:handlebars-guava-cache (2.2.0), com.github.jknack:handlebars-helpers (2.2.0) +10 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.2.0)

com.github.jknack:handlebars MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.2.0 - com.github.jknack:handlebars-helpers 2.2.0 -...

com.github.jknack:handlebars-humanize (0.5.5), com.github.jknack:handlebars-jackson2 (0.5.5) +3 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.5.5)

com.github.jknack:handlebars MAVEN version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.5.5 - com.github.jknack:handlebars-jackson2 0.5.5 -...

com.ecfront:rpc (0.9), com.englishtown.vertx:vertx-jersey (4.0.0-rc1) +22 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.3.0)

com.github.jknack:handlebars MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.ecfront:rpc 0.9 - com.englishtown.vertx:vertx-jersey 4.0.0-rc1 -...