Handlebars information disclosure vulnerability (CNVD-2021-47374)

handlebars is a semantic Web template system. express-hbs suffers from an information disclosure vulnerability that stems from mixing pure template data with engine configuration options via the Express rendering API. Layout parameters may trigger a file disclosure vulnerability in downstream...