https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:06:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-71456 cnvd-2021-71456 https://cve.radiocsirt.org/vuln/cnvd-2021-71456 https://cve.radiocsirt.org/vuln/euvd-2026-28183 EUVD-2026-28183 https://cve.radiocsirt.org/vuln/euvd-2026-28183 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32822 <p>The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.</p> <p>The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32822 https://cve.radiocsirt.org/vuln/ghsa-7f5c-rpf4-86p8 <p><strong>Affected:</strong> npm: hbs</p> <p>The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.</p> <p><strong>Affected:</strong> npm: hbs</p> <p>The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.</p> https://cve.radiocsirt.org/vuln/ghsa-7f5c-rpf4-86p8 https://cve.radiocsirt.org/vuln/gsd-2021-32822 gsd-2021-32822 https://cve.radiocsirt.org/vuln/gsd-2021-32822 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2709 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM QRadar SIEM ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM QRadar SIEM ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2709