The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Information Disclosure
Prototype Pollution
E Series Performance Analyzer
Handlebars
Netapp
+1
NVD
GitHub
CVSS 3.1
9.8
EPSS
4.5%