Bumps handlebars from 4.1.2 to 4.7.8 to resolve CVE-2021-23369

nostalgic-css / NES.css

NES-style CSS Framework | ファミコン風CSSフレームワーク

https://nostalgic-css.github.io/NES.css/

MIT License

20.47k stars 1.64k forks source link

Bumps handlebars from 4.1.2 to 4.7.8 to resolve CVE-2021-23369 #503

Closed Zosoled closed 5 months ago

Zosoled commented 5 months ago

Bumps handlebars from 4.1.2 to 4.7.8.

Release notes
Changelog
Commits

updated-dependencies:

dependency-name: handlebars
dependency-type: indirect

Description The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.