https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:18:08.507043+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-278 certfr-2022-avi-278 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum discover. Certaines d'entre elles permettent à un att… 2026-10-02T21:18:08.615777+00:00 certfr-2022-avi-278 https://cve.radiocsirt.org/vuln/euvd-2026-60359 EUVD-2026-60359 2026-10-02T21:18:08.615820+00:00 EUVD-2026-60359 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20920 fkie_cve-2019-20920 2026-10-02T21:18:08.615836+00:00

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).

 https://cve.radiocsirt.org/vuln/ghsa-3cqr-58rm-57f8 GHSA-3cqr-58rm-57f8 — Arbitrary Code Execution in Handlebars 2026-10-02T21:18:08.615866+00:00

Affected: npm: handlebars

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).

 https://cve.radiocsirt.org/vuln/gsd-2019-20920 gsd-2019-20920 2026-10-02T21:18:08.615891+00:00 gsd-2019-20920 https://cve.radiocsirt.org/vuln/rhsa-2020:5179 RHSA-2020:5179 — Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update 2026-10-02T21:18:08.615903+00:00

nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS nodejs-lodash: prototype pollution in zipObjectDeep function

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-20920 UBUNTU-CVE-2019-20920 2026-10-02T21:18:08.615925+00:00

Affected: Ubuntu:18.04:LTS: node-handlebars

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).