Prototype Pollution vulnerability found in handlebars 1.0.6 before 4.5.3. It is possible to add or modify properties to the Object prototype through a malicious template. Attacker may crash the application or execute Arbitrary Code in specific conditions.
WS-2019-0333 - Medium Severity Vulnerability
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /finos-fo/website/package.json
Path to vulnerable library: /tmp/git/finos-fo/website/node_modules/handlebars/package.json
Dependency Hierarchy: - typedoc-0.15.0.tgz (Root Library) - :x: **handlebars-4.1.2.tgz** (Vulnerable Library)
Prototype Pollution vulnerability found in handlebars 1.0.6 before 4.5.3. It is possible to add or modify properties to the Object prototype through a malicious template. Attacker may crash the application or execute Arbitrary Code in specific conditions.
Publish Date: 2019-12-05
URL: WS-2019-0333
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1325
Release Date: 2019-12-05
Fix Resolution: handlebars - 4.5.3