Closed mend-for-github-com[bot] closed 4 years ago
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /finos-fo/website/package.json
Path to vulnerable library: /tmp/git/finos-fo/website/node_modules/handlebars/package.json
Dependency Hierarchy: - typedoc-0.15.0.tgz (Root Library) - :x: **handlebars-4.1.2.tgz** (Vulnerable Library)
handlebars before 4.3.0 is vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Objects' __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.
Publish Date: 2019-10-06
URL: WS-2019-0291
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1164
Release Date: 2019-10-06
Fix Resolution: 4.3.0
WS-2019-0291 - High Severity Vulnerability
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /finos-fo/website/package.json
Path to vulnerable library: /tmp/git/finos-fo/website/node_modules/handlebars/package.json
Dependency Hierarchy: - typedoc-0.15.0.tgz (Root Library) - :x: **handlebars-4.1.2.tgz** (Vulnerable Library)
handlebars before 4.3.0 is vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Objects' __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.
Publish Date: 2019-10-06
URL: WS-2019-0291
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1164
Release Date: 2019-10-06
Fix Resolution: 4.3.0