EUVD-2026-89555

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler that percent-decodes the path. In a...

CVE-2026-103088

Handlebars.java versions prior to 4.5.5 are vulnerable to a directory traversal flaw. Specifically, in handlebars-springmvc versions 4.5.3 and 4.5.4 , the path-containment fix for CVE-2026-63490 incorrectly validates template locations as raw percent-encoded strings while the underlying URL handl...