Product by Handlebarsjs
Handlebarsjs Handlebars
10 known vulnerabilities in Handlebarsjs Handlebars (Handlebarsjs), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33937 | Handlebars.js has JavaScript Injection via AST Type Confusion | 9.8 | |
| High | CVE-2019-20920 | Handlebarsjs Handlebars: Cross-Site Scripting (XSS) | 8.1 | |
| High | CVE-2019-20922 | Handlebarsjs Handlebars: Denial of Service | 7.5 | |
| Critical | CVE-2021-23369 | Remote Code Execution (RCE) | 5.6 | |
| Critical | CVE-2021-23383 | Prototype Pollution | 5.6 | |
| High | CVE-2026-33938 | Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block | 8.1 | |
| High | CVE-2026-33940 | Handlebars-lang Handlebars.js: Code Injection | 8.1 | |
| High | CVE-2026-33939 | Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation | 7.5 | |
| High | CVE-2026-33941 | Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options | 8.2 | |
| Medium | CVE-2026-33916 | Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection | 4.7 |