https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:40:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00795 bdu:2020-00795 https://cve.radiocsirt.org/vuln/bdu:2020-00795 https://cve.radiocsirt.org/vuln/certfr-2020-avi-015 certfr-2020-avi-015 https://cve.radiocsirt.org/vuln/certfr-2020-avi-015 https://cve.radiocsirt.org/vuln/cnvd-2019-47434 cnvd-2019-47434 https://cve.radiocsirt.org/vuln/cnvd-2019-47434 https://cve.radiocsirt.org/vuln/euvd-2026-59630 EUVD-2026-59630 https://cve.radiocsirt.org/vuln/euvd-2026-59630 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19919 <p>Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object&#39;s __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p> <p>Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object&#39;s __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19919 https://cve.radiocsirt.org/vuln/ghsa-w457-6q6x-cgp9 <p><strong>Affected:</strong> npm: handlebars, RubyGems: bootstrap-wysihtml5-rails</p> <p>Versions of `handlebars` prior to 3.0.8 or 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Objects&#39; `__proto__` and `__defineGetter__` properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p> <p>## Recommendation</p> <p>Upgrade to version 3.0.8, 4.3.0 or later.</p> <p><strong>Affected:</strong> npm: handlebars, RubyGems: bootstrap-wysihtml5-rails</p> <p>Versions of `handlebars` prior to 3.0.8 or 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Objects&#39; `__proto__` and `__defineGetter__` properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p> <p>## Recommendation</p> <p>Upgrade to version 3.0.8, 4.3.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-w457-6q6x-cgp9 https://cve.radiocsirt.org/vuln/gsd-2019-19919 gsd-2019-19919 https://cve.radiocsirt.org/vuln/gsd-2019-19919 https://cve.radiocsirt.org/vuln/rhsa-2023:1334 <p>Solr: Code execution via entity expansion unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option nodejs-handlebars: Remote code execution when compiling untrusted compile templates with compat:true option maven: Block repositories using http by default</p> <p>Solr: Code execution via entity expansion unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option nodejs-handlebars: Remote code execution when compiling untrusted compile templates with compat:true option maven: Block repositories using http by default</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1334 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19919 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-handlebars</p> <p>Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object&#39;s __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-handlebars</p> <p>Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object&#39;s __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19919