395 matches found
EUVD-2021-1052
Malware in sbrugna...
EUVD-2022-0849
Malicious code in bioql PyPI...
EUVD-2022-0882
Malicious code in bioql PyPI...
EUVD-2025-32226
Malicious code in bioql PyPI...
EUVD-2022-0789
Malicious code in bioql PyPI...
MAL-2025-47900 Malicious code in kss-node-handlebars-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca63cd37e035f2a065952377f5c8b77ac950f443c2ac3233ead4b6203f62d9c The OpenSSF Package Analysis project identified 'kss-node-handlebars-builder' @ 9.0.1 npm as malicious. It is considered malicious because: - Th...
Malicious code in kss-node-handlebars-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca63cd37e035f2a065952377f5c8b77ac950f443c2ac3233ead4b6203f62d9c The OpenSSF Package Analysis project identified 'kss-node-handlebars-builder' @ 9.0.1 npm as malicious. It is considered malicious because: - Th...
Linux Distros Unpatched Vulnerability : CVE-2015-8861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute...
Linux Distros Unpatched Vulnerability : CVE-2019-20920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attacke...
Linux Distros Unpatched Vulnerability : CVE-2019-20922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Handlebars before 4.4.5 allows Regular Expression Denial of Service ReDoS because of eager matching. The parser may be forced into an endless loop while...
Linux Distros Unpatched Vulnerability : CVE-2019-19919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's proto and...
Malicious code in modown-handlebars (npm)
The package modown-handlebars was found to contain malicious code...
MAL-2025-22172 Malicious code in handlebars-inline-precompile (npm)
The package handlebars-inline-precompile was found to contain malicious code...
Malicious code in handlebars-inline-precompile (npm)
The package handlebars-inline-precompile was found to contain malicious code...
MAL-2025-26594 Malicious code in modown-handlebars (npm)
The package modown-handlebars was found to contain malicious code...
Malicious code in handlebars-formatter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...
MAL-2025-5308 Malicious code in handlebars-formatter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...
CVE-2021-32820
Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...
Linux Distros Unpatched Vulnerability : CVE-2021-23383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted...
