Express-handlebars - Local File Inclusion

Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

CVE-2026-108551

The openapi-typescript-codegen library, in versions through 0.31.0 , is vulnerable to a code injection flaw (CWE-94) triggered by the use of Handlebars templates. Attackers who control an OpenAPI document can inject arbitrary JavaScript by providing unescaped single quotes in specific fields, suc...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2021-23383

CVE-2021-23383 Пакет handlebars версии до 4.7.7 уязвим для Prototype Pollution при выборе определенных параметров компиляции для компиляции шаблонов из ненадежного источника...

CVE-2021-23369

CVE-2021-23369 Vulnérabilité Handlebars CVE-2021-23369 pip install requests Entrez l'URL : Description de la vulnérabilité Le package handlebars avant la version 4.7.7 est vulnérable à l'exécution de code à distance RCE lors de la sélection de certaines options de compilation pour compiler des...

CVE-2019-19919

CVE-2019-19919 Vulnérabilité de neutralisation incorrecte des éléments spéciaux dans la sortie utilisée par un composant aval 'Injection' de Handlebars pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Entrez l'URL cible : Sortie attendue ...

Check-CVE-2021-23383

Check-CVE-2021-23383 Vérifiez les conditions d'exploitation de CVE-2021-23383 via l'évaluation de la version de la bibliothèque handlebars...

CVE-2026-33937-for-DarkZeroReturns

POC pour CVE-2026-33937 ceci est un poc pour CVE-2026-33937 qui a été créé avec l'IA afin d'exploiter la vulnérabilité Handelbars dans la Box DarkZeroRetuns le poc original https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py mais il ne fonctionne pas pour cette box spécifique le poc a...

CVE-2026-106446

A flaw was found in Handlebars. Incomplete validation of pre-parsed AST objects passed to compile or precompile allows unchecked AST fields to be emitted into generated JavaScript. An attacker who can supply an object instead of a template string can inject and execute arbitrary JavaScript in the...

CVE-2026-106445

A flaw was found in Handlebars. The lookupProperty own-property check returns Function.prototype.constructor before the prototype-method deny list is applied. When an attacker can render a controlled template with allowProtoMethodsByDefault enabled and an accessible function in the template...

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Summary Handlebars.precompile generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged. HTML parsers recognize even inside a JavaScript string literal, closing the surrounding script element and allowing...

EUVD-2026-93974

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates...

GHSA-XW65-4HP5-5HC7 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Summary Handlebars.precompile generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged. HTML parsers recognize even inside a JavaScript string literal, closing the surrounding script element and allowing...

NPM: Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

NPM: Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates vulnerability discovered by ? in WordPress Npm handlebars versions = 4.0.0, = 4.7.9...

EUVD-2026-93969

Handlebars: JavaScript Injection via AST Type Confusion in compile bypass of CVE-2026-33937...

GHSA-8R5X-FM3F-WHWJ Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Summary Handlebars.compile and Handlebars.precompile accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into...

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Summary Handlebars.compile and Handlebars.precompile accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into...

NPM: Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

NPM: Handlebars: JavaScript Injection via AST Type Confusion in compile bypass of CVE-2026-33937 vulnerability discovered by ? in WordPress Npm handlebars versions = 4.0.0, = 4.7.9...

EUVD-2026-93952

Handlebars: JavaScript Injection via Own Property Check Bypass...

GHSA-P8WG-VRV2-V86F Handlebars: JavaScript Injection via Own Property Check Bypass

Summary Handlebars can expose the Function constructor despite its prototype-access deny list. When a template reaches Function.prototype, its own constructor property is returned before the deny list is checked. An attacker who can render a controlled template with allowProtoMethodsByDefault: tr...