diff --git a/gems/handlebars-source/CVE-2021-23369.yml b/gems/handlebars-source/CVE-2021-23369.yml
new file mode 100644
index 0000000000..52916a9752
--- /dev/null
+++ b/gems/handlebars-source/CVE-2021-23369.yml
@@ -0,0 +1,15 @@
+---
+gem: handlebars-source
+cve: 2021-23369
+ghsa: f2jv-r9rf-7988
+url: https://github.com/advisories/GHSA-f2jv-r9rf-7988
+title: Remote code execution in handlebars when compiling templates
+date: 2021-04-12
+description: |
+  The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when
+  selecting certain compiling options to compile templates coming from an untrusted source.
+  This vulnerability has been assigned the CVE identifier CVE-2021-23369.
+
+cvss_v3: 9.8
+patched_versions:
+  - ">= 4.7.7"
diff --git a/gems/handlebars-source/CVE-2021-23383.yml b/gems/handlebars-source/CVE-2021-23383.yml
new file mode 100644
index 0000000000..c7eae89c2d
--- /dev/null
+++ b/gems/handlebars-source/CVE-2021-23383.yml
@@ -0,0 +1,15 @@
+---
+gem: handlebars-source
+cve: 2021-23383
+ghsa: 765h-qjxv-5f44
+url: https://github.com/advisories/GHSA-765h-qjxv-5f44
+title: Prototype Pollution in handlebars
+date: 2021-05-04
+description: |
+  The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when
+  selecting certain compiling options to compile templates coming from an untrusted source.
+  This vulnerability has been assigned the CVE identifier CVE-2021-23383.
+
+cvss_v3: 9.8
+patched_versions:
+  - ">= 4.7.7"