Log in Start free

jknack

Products

ProductCVEsExploitedLatest
handlebars.java3–Sep 30, 2026

Exploited and recent CVEs

  • CVE-2026-103088 High 7.5 Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded string 0.7%
  • CVE-2026-63490 High 7.5 Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass 0.7%
  • CVE-2026-55760 High 7.5 handlebars.java FileTemplateLoader Path Traversal 0.5%