Express-handlebars - Local File Inclusion

Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

CLSA-2026-1787070403 TuxCare security update for handlebars (2 CVEs)

TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 2.0.0-tuxcare.5...

EUVD-2026-53371

The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its templateString property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input. Because...

CLSA-2026-1785117463 TuxCare security update for handlebars (5 CVEs)

TuxCare rebuilt handlebars to address 5 CVEs. Fixed in 3.0.8-tuxcare.3...

CLSA-2026-1784596337 TuxCare security update for handlebars (3 CVEs)

TuxCare rebuilt handlebars to address 3 CVEs. Fixed in 3.0.8-tuxcare.1...

CLSA-2026-1782435546 TuxCare security update for handlebars (8 CVEs)

TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 4.7.8-tuxcare.1...

CLSA-2026-1782349135 TuxCare security update for handlebars (8 CVEs)

TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 4.7.7-tuxcare.1...

CLSA-2026-1776991069 TuxCare security update for handlebars (9 CVEs)

TuxCare rebuilt handlebars to address 9 CVEs. Fixed in 4.7.9-tuxcare.1...

CLSA-2026-1777163884 TuxCare security update for handlebars (10 CVEs)

TuxCare rebuilt handlebars to address 10 CVEs. Fixed in 3.0.3-tuxcare.2...

CLSA-2026-1774743831 TuxCare security update for handlebars (2 CVEs)

TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 1.3.0-tuxcare.2...

CLSA-2026-1774743837 TuxCare security update for handlebars (7 CVEs)

TuxCare rebuilt handlebars to address 7 CVEs. Fixed in 2.0.0-tuxcare.3...

CLSA-2026-1774743840 TuxCare security update for handlebars (6 CVEs)

TuxCare rebuilt handlebars to address 6 CVEs. Fixed in 1.3.0-tuxcare.3...

CLSA-2026-1774743830 TuxCare security update for handlebars (8 CVEs)

TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 1.0.12-tuxcare.2...

CLSA-2026-1774743832 TuxCare security update for handlebars (3 CVEs)

TuxCare rebuilt handlebars to address 3 CVEs. Fixed in 2.0.0-tuxcare.2...

CLSA-2026-1773101681 TuxCare security update for handlebars (33 CVEs)

TuxCare rebuilt handlebars to address 33 CVEs. Fixed in 3.0.3-tuxcare.1...

K000162730: Handlebars JavaScript templating engine vulnerability CVE-2021-23383

Security Advisory Description The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. CVE-2021-23383 Impact There is no impact; F5 products are not affected by this vulnerability...

Exploit for Type Confusion in Handlebarsjs Handlebars

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.j...

SUSE CVE-2026-55760

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

CVE-2026-55760

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

CVE-2026-55760 handlebars.java FileTemplateLoader Path Traversal

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...