GHSA-f52g-6jhx-586p
Denial of Service in handlebars
GHSA-f52g-6jhx-586p is a vulnerability with no CVSS score yet in handlebars, published September 3, 2020. No source lists public exploit code. Fixed in handlebars 4.4.5.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.4.5handlebars
Description
Affected versions of handlebars are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.
Recommendation
Upgrade to version 4.4.5 or later.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
handlebarsnpm | 4.0.0 up to 4.4.5 | 4.4.5 |
What each source reports
GitHub AdvisoriesNo score
Denial of Service in handlebars
Affected versions of handlebars are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.
Recommendation
Upgrade to version 4.4.5 or later.
- Record
GHSA-f52g-6jhx-586p- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVNo score
Denial of Service in handlebars
Affected versions of handlebars are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.
Recommendation
Upgrade to version 4.4.5 or later.
- Record
GHSA-f52g-6jhx-586p- Weakness
- CWE-400
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.