You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
handlebars before 4.4.5 is vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.
✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
mend-bolt-for-githubbot
changed the title
WS-2019-0491 (High) detected in handlebars-4.1.2.tgz
WS-2019-0491 (High) detected in handlebars-4.1.2.tgz - autoclosed
Jun 8, 2022
WS-2019-0491 - High Severity Vulnerability
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: shipengine-request/package.json
Path to vulnerable library: shipengine-request/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: 182dd874017bffa87268b46b29bc563fc20ed112
handlebars before 4.4.5 is vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.
Publish Date: 2019-11-04
URL: WS-2019-0491
Base Score Metrics:
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1300
Release Date: 2019-11-04
Fix Resolution: handlebars - 4.4.5
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: