Components Vulnerabilities Security Events Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

com.github.jknack/handlebars 2.3.1 | Vulne… | Sonatype Guide

Get full component data and automated fixes with Sonatype Guide.

Sign up for free

com.github.jknack

handlebars

2.3.1

handlebars 2.3.1

com.github.jknack

PublishedOct 17, 2015•Policy

compliance

Developer Trust Score

Recommended Version:x.y.z

Recommended upgrade that meets your policy.

Compare Versions

Severity

Critical (2)

High (5)

Medium (1)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

7.5CVE-2026-55760

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile() using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template names derived from URL path parameters, request parameters, or other user-controlled sources. This issue is fixed in version 4.5.2.

PublishedJun 17, 2026

8.8sonatype-2021-0236

handlebars - Code Injection [CVE-2021-23369]

PublishedMar 3, 2021

7.5sonatype-2019-0496

handlebars - Prototype Pollution

PublishedNov 21, 2019

7.5sonatype-2019-0462

handlebars - Denial of Service (DoS)

PublishedNov 6, 2019

9.8sonatype-2019-0394

handlebars - Prototype Pollution [CVE-2019-19919]

SeverityCritical

PublishedSep 26, 2019

9.8sonatype-2019-0253

Handlebars - Remote Code Execution (RCE)

SeverityCritical

PublishedJul 1, 2019

8.8sonatype-2019-0058

handlebars - Prototype Pollution

PublishedFeb 15, 2019

6.1sonatype-2015-0026

handlebars - Cross-Site Scripting (XSS) [CVE-2015-8861]

PublishedMar 28, 2017