Skip to content
OpenAdvisories

Archive

29 March 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.7

    Handlebars.js has a Property Access Validation Bypass in container.lookup

    ## Summary In `lib/handlebars/runtime.js`, the `container.lookup()` function uses `container.lookupProperty()` as a gate check to enforce prototype-access controls, but then discards the validated result and performs a second, unguarded property access (`dept…

  • Low 3.3

    mxml mxmlIndexNew mxml-index.c index_sort stack-based overflow

    A vulnerability was determined in mxml up to 4.0.4. This issue affects the function index_sort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restri…