EUVD-2022-0849

Malicious code in bioql PyPI...

Malicious code in kss-node-handlebars-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca63cd37e035f2a065952377f5c8b77ac950f443c2ac3233ead4b6203f62d9c The OpenSSF Package Analysis project identified 'kss-node-handlebars-builder' @ 9.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-47900 Malicious code in kss-node-handlebars-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca63cd37e035f2a065952377f5c8b77ac950f443c2ac3233ead4b6203f62d9c The OpenSSF Package Analysis project identified 'kss-node-handlebars-builder' @ 9.0.1 npm as malicious. It is considered malicious because: - Th...

Linux Distros Unpatched Vulnerability : CVE-2015-8861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute...

Linux Distros Unpatched Vulnerability : CVE-2019-20922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Handlebars before 4.4.5 allows Regular Expression Denial of Service ReDoS because of eager matching. The parser may be forced into an endless loop while...

Linux Distros Unpatched Vulnerability : CVE-2019-19919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's proto and...

Linux Distros Unpatched Vulnerability : CVE-2019-20920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attacke...

Malicious code in handlebars-inline-precompile (npm)

The package handlebars-inline-precompile was found to contain malicious code...

Malicious code in modown-handlebars (npm)

The package modown-handlebars was found to contain malicious code...

MAL-2025-22172 Malicious code in handlebars-inline-precompile (npm)

The package handlebars-inline-precompile was found to contain malicious code...

MAL-2025-26594 Malicious code in modown-handlebars (npm)

The package modown-handlebars was found to contain malicious code...

Malware in handlebars-formatter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5308 Malicious code in handlebars-formatter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...

Malicious code in handlebars-formatter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...

CVE-2021-32820

Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

Linux Distros Unpatched Vulnerability : CVE-2021-23383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted...

Exploit for CVE-2021-23369

CVE-2021-23369 Handlebars CVE-2021-23369 Vulnerability p...

Malicious code in handlebars-helper-attrs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9650 Malicious code in handlebars-helper-attrs (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2

Summary In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2 Vulnerability Details CVEID:CVE-2018-1000134 DESCRIPTION: Ping Identity UnboundID LDAP SDK could allow a remote attacker to...