Skip to content
OpenAdvisories

Product · jknack

handlebars.java

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-103088

    Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment …

    jknack handlebars.java
  • High 7.5
    CVE-2026-63490

    Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass

    Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handlebars.springmvc.SpringTemplateLoader resolves attacker-influenced Spring MVC view names through Spring ResourceLoader without the path-contai…

    jknack handlebars.java com.github.jknack:handlebars-springmvc Maven
  • High 7.5
    CVE-2026-55760

    handlebars.java FileTemplateLoader Path Traversal

    Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile() using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing …

    jknack handlebars.java com.github.jknack:handlebars Maven