Closed mend-for-github-com[bot] closed 4 years ago
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /finos-fo/website/package.json
Path to vulnerable library: /tmp/git/finos-fo/website/node_modules/handlebars/package.json
Dependency Hierarchy: - typedoc-0.15.0.tgz (Root Library) - :x: **handlebars-4.1.2.tgz** (Vulnerable Library)
A Denial of Service vulnerability found in handlebars 4.x before 4.4.5.While processing specially-crafted templates, the parser may be forced into endless loop. Attackers may exhaust system resources.
Publish Date: 2019-12-01
URL: WS-2019-0318
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1300
Release Date: 2019-12-01
Fix Resolution: handlebars - 4.4.5
WS-2019-0318 - Medium Severity Vulnerability
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /finos-fo/website/package.json
Path to vulnerable library: /tmp/git/finos-fo/website/node_modules/handlebars/package.json
Dependency Hierarchy: - typedoc-0.15.0.tgz (Root Library) - :x: **handlebars-4.1.2.tgz** (Vulnerable Library)
A Denial of Service vulnerability found in handlebars 4.x before 4.4.5.While processing specially-crafted templates, the parser may be forced into endless loop. Attackers may exhaust system resources.
Publish Date: 2019-12-01
URL: WS-2019-0318
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1300
Release Date: 2019-12-01
Fix Resolution: handlebars - 4.4.5