DirectorySecurity Advisories
Sign In
Security Advisories

CGA-p9q6-f6vc-279w

Published

Last updated

https://images.chainguard.dev/security/CGA-p9q6-f6vc-279w
Package

gitlab-rails-ee-17.5

Latest Update
Pending upstream fix
Aliases
  • GHSA-g9r4-xpmj-mj65

Summary

Prototype Pollution in handlebars

Description

Versions of handlebars prior to 3.0.8 or 4.5.3 are vulnerable to prototype pollution. It is possible to add or modify properties to the Object prototype through a malicious template. This may allow attackers to crash the application or execute Arbitrary Code in specific conditions.

Recommendation

Upgrade to version 3.0.8, 4.5.3 or later.

References

  • https://github.com/advisories/GHSA-g9r4-xpmj-mj65

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images