CVE-2021-23383.yml

---
gem: handlebars-source
cve: 2021-23383
ghsa: 765h-qjxv-5f44
url: https://github.com/advisories/GHSA-765h-qjxv-5f44
title: Prototype Pollution in handlebars
date: 2021-05-04
description: |
  The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when
  selecting certain compiling options to compile templates coming from an untrusted source.
  This vulnerability has been assigned the CVE identifier CVE-2021-23383.

cvss_v3: 9.8
patched_versions:
  - ">= 4.7.7"