Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d2a13eca by Salvatore Bonaccorso at 2026-10-07T22:34:49+02:00
Track fixed version for node-handlebars issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -827,18 +827,18 @@ CVE-2026-106448 (StableLib is a stable library of useful
TypeScript and JavaScri
CVE-2026-106447 (StableLib is a stable library of useful TypeScript and
JavaScript code ...)
NOT-FOR-US: StableLib
CVE-2026-106446 (Handlebars provides the power necessary to let users build
semantic te ...)
- - node-handlebars <unfixed> (bug #1150246)
+ - node-handlebars 3:4.7.10-1 (bug #1150246)
NOTE:
https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj
NOTE: https://github.com/handlebars-lang/handlebars.js/pull/2185
NOTE: Fixed by:
https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2
(v4.7.10)
NOTE: CVE exists because of a bypass of CVE-2026-33937
CVE-2026-106445 (Handlebars provides the power necessary to let users build
semantic te ...)
- - node-handlebars <unfixed> (bug #1150246)
+ - node-handlebars 3:4.7.10-1 (bug #1150246)
NOTE:
https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f
NOTE: https://github.com/handlebars-lang/handlebars.js/pull/2185
NOTE: Fixed by:
https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa
(v4.7.10)
CVE-2026-106444 (Handlebars provides the power necessary to let users build
semantic te ...)
- - node-handlebars <unfixed> (bug #1150246)
+ - node-handlebars 3:4.7.10-1 (bug #1150246)
NOTE:
https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7
NOTE: https://github.com/handlebars-lang/handlebars.js/pull/2185
NOTE: Fixed by:
https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725
(v4.7.10)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2a13eca6e1e9998335bf7940594fbd575f2ecb8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2a13eca6e1e9998335bf7940594fbd575f2ecb8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
