688 matches found
CVE-2021-23383
CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source...
Express-handlebars - Local File Inclusion
Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...
CVE-2021-23369
CVE-2021-23369 Handlebars CVE-2021-23369 Vulnerability pip install requests Enter the Url : Vulnerability Description The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming from an untrusted source...
CVE-2019-19919
CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...
CVE-2026-33937-for-DarkZeroReturns
POC for CVE-2026-33937 this is a poc for CVE-2026-33937 that was made with AI in order to exploit the Handelbars vulnerability in the Box DarkZeroRetuns the original poc https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py but it doesn't work for this specific box the poc was written by...
CVE-2026-29053
This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...
Check-CVE-2021-23383
Check-CVE-2021-23383 Check the conditions for exploiting CVE-2021-23383 through the handlebars library version assessment...
Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in handlebars
Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in handlebars. CVE-2026-106444, CVE-2026-106445, CVE-2026-106446 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-106444 DESCRIPTION: Handlebars provides the...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules
Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules. Vulnerability Details CVEID:CVE-2026-106444 DESCRIPTION:...
SUSE CVE-2026-119716
pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to...
CLEANSTART-2026-ZM47868 Handlebars provides the power necessary to let users build semantic templates
Security vulnerability affects the opensearch-dashboards-fips package. Handlebars provides the power necessary to let users build semantic templates...
CLEANSTART-2026-MK39427 Handlebars provides the power necessary to let users build semantic templates
Security vulnerability affects the opensearch-dashboards-fips package. Handlebars provides the power necessary to let users build semantic templates...
CLEANSTART-2026-MC54035 Handlebars provides the power necessary to let users build semantic templates
Security vulnerability affects the opensearch-dashboards-fips package. Handlebars provides the power necessary to let users build semantic templates...
CLEANSTART-2026-KZ51330 Handlebars provides the power necessary to let users build semantic templates
Security vulnerability affects the opensearch-dashboards-fips package. Handlebars provides the power necessary to let users build semantic templates...
CLEANSTART-2026-CV71003 Handlebars provides the power necessary to let users build semantic templates
Security vulnerability affects the opensearch-dashboards-fips package. Handlebars provides the power necessary to let users build semantic templates...
CLEANSTART-2026-SV35371 Handlebars provides the power necessary to let users build semantic templates
Security vulnerability affects the opensearch-dashboards-fips package. Handlebars provides the power necessary to let users build semantic templates...
CVE-2026-119716
pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to...
CVE-2026-119717
Rejected reason: This CVE ID has been rejected as a duplicate...
