Handlebars moderate severity vulnerability (withdrawn)

Severity: info · Published 2017-10-24

This advisory for the Handlebars template engine has been withdrawn as a duplicate. Handlebars is a widely-used templating library that generates HTML and text output in web applications. The specific vulnerability details are not available in this withdrawn advisory, which has been superseded by another published advisory.

Technologies: handlebars (npm). Vendors: npm.

Quick answers

Is This vulnerability exploited in the wild?
No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.
How severe is This vulnerability?
Informational severity, published 24 October 2017.
Which products and versions are affected?
handlebars (npm) SEMVER:introduced=0,fixed=4.0.0.
Is there a fix for This vulnerability?
Yes. handlebars (npm): upgrade to 4.0.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
Am I affected?
Check whether you run handlebars (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • handlebars (npm): upgrade to 4.0.0 or later
    npm install handlebars@4.0.0

Affected products

  • Handlebars Handlebars < 4.0.0

Timeline

  • 2017-10-24: disclosed: Advisory GHSA-fmr4-7g9q-7hc7 published
  • 2020-06-17: other: Advisory withdrawn as duplicate of GHSA-9prh-257w-9277

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.