handlebars-lang handlebars.js

• CVE-2026-106446 Critical 9.8 Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) 0.8%
• CVE-2026-106445 Critical 9.2 Handlebars: JavaScript Injection via Own Property Check Bypass 0.6%
• CVE-2026-106444 Medium 4.7 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates 0.3%
• CVE-2026-33941 High 8.3 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options 0.3%
• CVE-2026-33940 High 8.1 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial 0.7%
• CVE-2026-33939 High 7.5 Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation 0.6%
• CVE-2026-33938 High 8.1 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block 0.7%
• CVE-2026-33937 Critical 9.8 Handlebars.js has JavaScript Injection via AST Type Confusion 1.9%
• CVE-2026-33916 Medium 4.7 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection 0.3%