cve-2026-33937

CVE-2026-33937 - PoC de explotación RCE en Handlebars Descripción CVE-2026-33937 es una vulnerabilidad crítica de Ejecución Remota de Código RCE en Handlebars causada por el manejo inseguro de la entrada del Árbol de Sintaxis Abstracta AST. La vulnerabilidad permite a los atacantes inyectar códig...

CVE-2026-33937

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Overview CVE-2026-33937 is a type confusion vulnerability in Handlebars.js. The Handlebars.compile function accepts both a template string and a pre-parsed AST objec...

handlebars 安全漏洞

Handlebars is a semantic web template system. Versions of Handlebars 4.7.8 and earlier contain security vulnerabilities. These vulnerabilities stem from the improper handling of the value field in NumberLiteral AST nodes by the Handlebars.compile function. This could allow attackers to inject and...