Commit 389c46a

authored

fix vulnerabilities handlebars

CVE-2019-19919 high severity Vulnerable versions: < 4.3.0 Patched version: 4.3.0 Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's proto and defineGetter properties, which may allow an attacker to execute arbitrary code through crafted payloads.

1 parent 54720d3 commit 389c46aCopy full SHA for 389c46a

1 file changed

+3

-3

lines changed

package-lock.json

1 file changed

+3

-3

lines changed

`‎package-lock.json‎`

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Comments

(0)