jknack handlebars.java

• CVE-2026-103088 High 7.5 Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded string 0.7%
• CVE-2026-63490 High 7.5 Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass 0.7%
• CVE-2026-55760 High 7.5 handlebars.java FileTemplateLoader Path Traversal 0.5%