https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:40:21.592080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00795 bdu:2020-00795 2026-10-02T19:40:21.723388+00:00 bdu:2020-00795 https://cve.radiocsirt.org/vuln/certfr-2020-avi-015 certfr-2020-avi-015 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-02T19:40:21.723430+00:00 certfr-2020-avi-015 https://cve.radiocsirt.org/vuln/cnvd-2019-47434 cnvd-2019-47434 2026-10-02T19:40:21.723459+00:00 cnvd-2019-47434 https://cve.radiocsirt.org/vuln/euvd-2026-59630 EUVD-2026-59630 2026-10-02T19:40:21.723479+00:00 EUVD-2026-59630 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19919 fkie_cve-2019-19919 2026-10-02T19:40:21.723497+00:00

Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.

 https://cve.radiocsirt.org/vuln/ghsa-w457-6q6x-cgp9 GHSA-w457-6q6x-cgp9 — Prototype Pollution in handlebars 2026-10-02T19:40:21.723556+00:00

Affected: npm: handlebars, RubyGems: bootstrap-wysihtml5-rails

Versions of `handlebars` prior to 3.0.8 or 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Objects' `__proto__` and `__defineGetter__` properties, which may allow an attacker to execute arbitrary code through crafted payloads.

## Recommendation

Upgrade to version 3.0.8, 4.3.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-19919 gsd-2019-19919 2026-10-02T19:40:21.723602+00:00 gsd-2019-19919 https://cve.radiocsirt.org/vuln/rhsa-2023:1334 RHSA-2023:1334 — Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.2 security update 2026-10-02T19:40:21.723614+00:00

Solr: Code execution via entity expansion unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option nodejs-handlebars: Remote code execution when compiling untrusted compile templates with compat:true option maven: Block repositories using http by default

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19919 UBUNTU-CVE-2019-19919 2026-10-02T19:40:21.723644+00:00

Affected: Ubuntu:18.04:LTS: node-handlebars

Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.