← Back

Hbs Project

hbs_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Hbs
hbs
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-32822
1Hbs Project
1Hbs
Nov 21, 2024
Aug 16, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes p...Show more
The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications. For an example PoC see the referenced GHSL-2021-020.Show less