Skip to content
OpenAdvisories

Vendor

hbs

2 known vulnerabilities.

Products

hbs 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-87123

    hbs vulnerable to Denial of Service via unhandled exception in async helper output escaping

    hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with registerAsyncHelper, resolves to an object whose toHTML property is truthy but not callable. Handleb…

    hbs hbs