search

yads / nodemailer-express-handlebars

A plugin for nodemailer that uses express-handlebars view engine to generate emails
84 stars 29 forks source link

Security Issue [Denial of Service] #31

Open axago opened 4 years ago

axago commented 4 years ago

Remediation : Upgrade to version 4.4.5 or later.

Screen Shot 2019-11-07 at 22 38 18

milo526 commented 4 years ago

NPM Security advisory 1324 Handlebars sadly has multiple security issues at the moment. I think we need to wait for a merge on https://github.com/ericf/express-handlebars/pull/267 and than require that version of express-handlebars for this library.

Handlebars vulnerabilities: https://www.npmjs.com/advisories/1300 https://www.npmjs.com/advisories/1316 https://www.npmjs.com/advisories/1324 https://www.npmjs.com/advisories/1325