K000162730: Handlebars JavaScript templating engine vulnerability CVE-2021-23383

Security Advisory Description The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. CVE-2021-23383 Impact There is no impact; F5 products are not affected by this vulnerability...

Exploit for Type Confusion in Handlebarsjs Handlebars

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.j...

handlebars-ssti-ast-rce

Handlebars SSTI → RCE via Server-Side AST Injection A proof-o...

Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete

Summary An end-user injection in Budibase's MongoDB datasource lets any BASIC app user bypass the builder's query-level access controls. Builders scope MongoDB reads per-user with bindings like "email": " currentUser.email " so each app user only sees their own rows. Because the binding is...

SUSE CVE-2026-55760

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

CVE-2026-55760

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

EUVD-2026-42352

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

CVE-2026-55760 handlebars.java FileTemplateLoader Path Traversal

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

CVE-2026-55760 handlebars.java FileTemplateLoader Path Traversal

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template nam...

The vulnerability of the Handlebars.compile() function, a tool for creating Handlebars templates, allows a malicious actor to cause a service failure.

The vulnerability of the Handlebars.compile function, a tool for creating Handlebars templates, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the compile() function in the Handlebars template creation tool allows a attacker to cause a service failure.

The vulnerability of the compile function in the Handlebars template creation tool is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the resolvePartial() function in the lib/handlebars/runtime.js component, a tool for creating Handlebars templates, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the resolvePartial function in the lib/handlebars/runtime.js component, a tool for creating Handlebars templates, is related to the lack of security measures for protecting the structure of web pages. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the Handlebars template creation tool lies in insufficient checking of unusual or exceptional states, allowing a violator to trigger a service failure.

The vulnerability of the Handlebars template creation tool is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the lib/precompiler.js component, a tool for creating Handlebars templates, allows a hacker to cause a service failure.

The vulnerability of the lib/precompiler.js component, which is part of the Handlebars template creation tool, is related to the lack of security measures for handling web page structures. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the `resolvePartial()` and `invokePartial()` functions in the `lib/handlebars/runtime.js` component, a tool for creating Handlebars templates, allows a malicious actor to cause a service failure.

The vulnerability of the resolvePartial and invokePartial functions in the lib/handlebars/runtime.js component, which is used for creating Handlebars templates, is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

Security Bulletin: Vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat. Vulnerabilities include an authorization bypass, providing the power necessary to let users build semantic templates, allowing arbitrary code to be...

ROOT-APP-MAVEN-CVE-2026-55760 CVE-2026-55760 in io.root.com.github.jknack:handlebars - Patched by Root

Root has patched CVE-2026-55760 in the io.root.com.github.jknack:handlebars package for Root:Maven. Multiple fixed versions available...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in Handlebars

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in Handlebars. CVE-2026-33916 This has been addressed. Vulnerability Details CVEID:CVE-2026-33916 DESCRIPTION: Handlebars provides the power necessary to let users build semantic...

handlebars.java FileTemplateLoader Path Traversal

Impact Any application that passes user-controlled input to Handlebars.compile using a FileTemplateLoader or ClassPathTemplateLoader is vulnerable to arbitrary file read. This is a realistic attack surface for web applications that use template names from URL path parameters, request parameters, ...

GHSA-R4GV-QR8J-P3PG handlebars.java FileTemplateLoader Path Traversal

Impact Any application that passes user-controlled input to Handlebars.compile using a FileTemplateLoader or ClassPathTemplateLoader is vulnerable to arbitrary file read. This is a realistic attack surface for web applications that use template names from URL path parameters, request parameters, ...