Approved changes feed: RSS · Atom
cpe:2.3:a:pillarjs:hbs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pillarjs (cc447f9a-ae88-52ad-b549-a3fb2cf56894) |
|---|---|
| Product | Hbs (96ea1a80-cb86-5ac6-92fb-13596a98bf46) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32822 |
vulnerable | 2026-06-08 05:32:08.107833 |
File disclosure in hbs
MEDIUM (4)
The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.
Published: 2021-08-16T18:45:10.000Z
Updated: 2024-08-03T23:33:55.940Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.