Skip to content
OpenAdvisories

Product · TryGhost

express-hbs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2021-32817

    File disclosure in express-hbs

    express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream appl…

    TryGhost express-hbs express-hbs npm