DirectorySecurity Advisories
Sign In
Security Advisories

CGA-gm79-fv78-w62f

Published

Last updated

https://images.chainguard.dev/security/CGA-gm79-fv78-w62f
Package

gitlab-rails-ee-fips-17.3

Latest Update
Not affected
Aliases
  • GHSA-g9r4-xpmj-mj65

Summary

Prototype Pollution in handlebars

Description

Versions of handlebars prior to 3.0.8 or 4.5.3 are vulnerable to prototype pollution. It is possible to add or modify properties to the Object prototype through a malicious template. This may allow attackers to crash the application or execute Arbitrary Code in specific conditions.

Recommendation

Upgrade to version 3.0.8, 4.5.3 or later.

References

  • https://github.com/advisories/GHSA-g9r4-xpmj-mj65

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images