Skip to content
OpenAdvisories

Package · npm

handlebars

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    GHSA-442j-39wm-28r2

    Handlebars.js has a Property Access Validation Bypass in container.lookup

    ## Summary In `lib/handlebars/runtime.js`, the `container.lookup()` function uses `container.lookupProperty()` as a gate check to enforce prototype-access controls, but then discards the validated result and performs a second, unguarded property access (`dept…

    handlebars npm