The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.
Exact source revision recorded 3 Nov 2026 19:11:00 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2021-1052
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Apr 12, 2021, 1:10:28 PM
dateUpdated: Oct 8, 2026, 9:13:45 PM
8 related source bulletins · separate from aliases
RHSA-2021:2500: Red Hat Security Advisory: Red Hat OpenShift Enterprise security and bug fix update
CVE-2019-20920 · CVE-2019-20922 · CVE-2021-23369 · CVE-2021-23383
RHSA-2021:4032: Red Hat Security Advisory: Openshift Logging 5.2.3 bug fix and security update
CVE-2021-23369 · CVE-2021-23383
WID-SEC-W-2023-3032: Tenable Security Nessus Network Monitor: Mehrere Schwachstellen
CVE-2023-5363 · CVE-2021-23383 · CVE-2021-23369 · CVE-2018-9206
RHSA-2023:1334: Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.2 security update
CVE-2017-12629 · CVE-2018-1000134 · CVE-2019-19919 · CVE-2019-20920 · CVE-2019-20922 · CVE-2021-23369 · CVE-2021-23383 · CVE-2021-26291
WID-SEC-W-2022-1646: Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Codeausführung
CVE-2021-23369 · CVE-2021-23383
WID-SEC-W-2024-0899: Oracle Fusion Middleware: Mehrere Schwachstellen
CVE-2019-0231 · CVE-2019-10172 · CVE-2019-13990 · CVE-2021-23369 · CVE-2022-1471 · CVE-2022-24329 · CVE-2022-25147 · CVE-2022-34169 · CVE-2022-34381 · CVE-2022-42003 · CVE-2022-45378 · CVE-2022-46337 · CVE-2022-48579 · CVE-2023-24021 · CVE-2023-2976 · CVE-2023-31122 · CVE-2023-33201 · CVE-2023-35116 · CVE-2023-35887 · CVE-2023-3635 · CVE-2023-37536 · CVE-2023-44487 · CVE-2023-46218 · CVE-2023-46589 · CVE-2023-48795 · CVE-2023-5072 · CVE-2023-52428 · CVE-2024-1597 · CVE-2024-20991 · CVE-2024-20992 · CVE-2024-21006 · CVE-2024-21007 · CVE-2024-21117 · CVE-2024-21118 · CVE-2024-21119 · CVE-2024-21120 · CVE-2024-23635 · CVE-2024-26308
RHSA-2021:3016: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes version 2.3
CVE-2020-28469 · CVE-2020-28500 · CVE-2020-28851 · CVE-2020-28852 · CVE-2021-3377 · CVE-2021-21272 · CVE-2021-21309 · CVE-2021-21321 · CVE-2021-21322 · CVE-2021-23337 · CVE-2021-23343 · CVE-2021-23346 · CVE-2021-23362 · CVE-2021-23364 · CVE-2021-23368 · CVE-2021-23369 · CVE-2021-23382 · CVE-2021-23383 · CVE-2021-23839 · CVE-2021-23840 · CVE-2021-23841 · CVE-2021-27292 · CVE-2021-27358 · CVE-2021-28092 · CVE-2021-28918 · CVE-2021-29418 · CVE-2021-29477 · CVE-2021-29478 · CVE-2021-29482 · CVE-2021-33502 · CVE-2021-33623
RHSA-2021:4628: Red Hat Security Advisory: Openshift Logging 5.1.4 bug fix and security update
CVE-2021-23369 · CVE-2021-23383
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON