https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:18:50 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-278 certfr-2022-avi-278 https://cve.radiocsirt.org/vuln/certfr-2022-avi-278 https://cve.radiocsirt.org/vuln/euvd-2026-60359 EUVD-2026-60359 https://cve.radiocsirt.org/vuln/euvd-2026-60359 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20920 <p>Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim&#39;s browser (effectively serving as XSS).</p> <p>Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim&#39;s browser (effectively serving as XSS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-20920 https://cve.radiocsirt.org/vuln/ghsa-3cqr-58rm-57f8 <p><strong>Affected:</strong> npm: handlebars</p> <p>Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim&#39;s browser (effectively serving as XSS).</p> <p><strong>Affected:</strong> npm: handlebars</p> <p>Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim&#39;s browser (effectively serving as XSS).</p> https://cve.radiocsirt.org/vuln/ghsa-3cqr-58rm-57f8 https://cve.radiocsirt.org/vuln/gsd-2019-20920 gsd-2019-20920 https://cve.radiocsirt.org/vuln/gsd-2019-20920 https://cve.radiocsirt.org/vuln/rhsa-2020:5179 <p>nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS nodejs-lodash: prototype pollution in zipObjectDeep function</p> <p>nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS nodejs-lodash: prototype pollution in zipObjectDeep function</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5179 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-20920 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-handlebars</p> <p>Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim&#39;s browser (effectively serving as XSS).</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-handlebars</p> <p>Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim&#39;s browser (effectively serving as XSS).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-20920