Handlebars-Lang

6 CVEs across 1 Handlebars-Lang products. Browse Handlebars-Lang vulnerabilities, severities, and proof-of-concept exploits.

Handlebars-Lang products with known CVEs

ProductCVEs
Handlebars.js6
Handlebars-Lang CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33941High8.22026-03-27Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler (`bin/handlebars…
CVE-2026-33940High8.12026-03-27Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, a crafted object placed in the template context…
CVE-2026-33939High7.52026-03-27Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains decorator s…
CVE-2026-33938High8.12026-03-27Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored…
CVE-2026-33937Critical9.82026-03-27Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST…
CVE-2026-33916Medium4.72026-03-27Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `resolvePartial()` in the Handlebars runtime re…