CVE-2026-33940 vulnerabilities

Vulnerabilities for packages: prism, rancher-api-ui, opensearch-dashboards, nextcloud-server, ts-patch, py3-jupyterlab, lerna...

Linux Distros Unpatched Vulnerability : CVE-2026-33940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, a crafted object placed in the template context...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3664 more potentially affected by CVE-2026-33940 via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33940 Source advisory: SNYK:JS-HANDLEBARS-15803086...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3664 more potentially affected by CVE-2026-33940 via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33940 Source advisory: OSV:GHSA-XHPV-HC6G-R9C6...

CVE-2026-33940

creationtimestamp| type| source ---|---|--- 2026-03-26 20:59:50+00:00| published-proof-of-concept| https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6 2026-03-27 22:24:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35w4bscs2s...