CVE-2019-19919 - handlebars.js
Old versions of Handlebars, a template engine used in web development, can be exploited by hackers to execute malicious code on a server. This can happen if an attacker sends…

Too many irrelevant or confusing CVEs? Use stackflag.com

#handlebarsjs #npm #CVE #infosec

CVE-2026-106446 - handlebars.js
Versions 4.0.0 through 4.7.10 of Handlebars accept pre‑parsed template objects and insert certain values directly into generated JavaScript. If an attacker can…

Too many irrelevant or confusing CVEs? Use stackflag.com

#handlebarsjs #handlebarslang #CVE #infosec

CVE-2026-106445 - handlebars.js
Versions 4.0.0 through 4.7.9 of the Handlebars templating library let a crafted template run any code on the server when the allow‑proto‑methods setting…

Too many irrelevant or confusing CVEs? Use stackflag.com

#handlebarsjs #handlebarslang #Debian12 #CVE #infosec

Two Handlebars.js vulnerability disclosures (CVE-2026-106445, CVE-2026-106446) enable RCE. Details and PoC are public. Update to 4.7.10 now.

#Handlebars #HandlebarsJS #NodeJS #CVE2026106445 #CVE2026106446 #RCE #JavaScript #Vulnerability