4coders-commons (>=0.0.1 <=0.0.2), @11ty/eleventy (=0.3.3) +3644 more potentially affected by CVE-2026-33939 via handlebars (>=4.0.0 <=4.7.8)

🗓️ 27 Mar 2026 18:21:15Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 security.snyk.io👁 7 Views

Handlebars up to 4.7.8 is affected by CVE-2026-33939; many transitive dependencies risk.

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to arbitrary code execution (CVE-2026-33937, CVE-2026-33938, CVE-2026-33940, CVE-2026-33941) and denial of service (CVE-2026-33939)	7 May 202613:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	24 Apr 202617:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	24 Apr 202614:07	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Handlebars	5 May 202609:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm
ATTACKERKB	CVE-2026-33939	27 Mar 202621:08	–	attackerkb
BDU FSTEC	The vulnerability of the Handlebars template creation tool lies in insufficient checking of unusual or exceptional states, allowing a violator to trigger a service failure.	7 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-33939 vulnerabilities	30 Mar 202619:17	–	cgr
Circl	CVE-2026-33939	26 Mar 202621:00	–	circl
CNNVD	handlebars 代码问题漏洞	27 Mar 202600:00	–	cnnvd

29 Mar 2026 09:39Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.00616

SSVC

handlebars cve-2026-33939 transitive-dependencies vulnerable-version eleventy four-point-seven-eight