VYPR
← All advisories
Critical severityNVD Advisory· Published Apr 12, 2021· Updated Sep 16, 2024

Remote Code Execution (RCE)

CVE-2021-23369

Description

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
handlebarsnpm
< 4.7.74.7.7
org.webjars:handlebarsMaven
< 4.7.74.7.7
org.webjars.npm:handlebarsMaven
< 4.7.74.7.7
org.webjars.bowergithub.wycats:handlebars.jsMaven
< 4.7.74.7.7

Affected products

115

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.