GHSA-765h-qjxv-5f44Published

Prototype Pollution

cve-program · CVE-2021-23383

Published

handlebars

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "handlebars",
                    "vendor": "n/a",
                    "versions": [
                        {
                            "lessThan": "4.7.7",
                            "status": "affected",
                            "version": "unspecified",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2022-0882

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: May 4, 2021, 8:35:21 AM

dateUpdated: Oct 8, 2026, 9:13:46 PM

7 related source bulletins · separate from aliases

RHSA-2021:4628: Red Hat Security Advisory: Openshift Logging 5.1.4 bug fix and security update

CVE-2021-23369 · CVE-2021-23383

RHSA-2021:3016: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes version 2.3

CVE-2020-28469 · CVE-2020-28500 · CVE-2020-28851 · CVE-2020-28852 · CVE-2021-3377 · CVE-2021-21272 · CVE-2021-21309 · CVE-2021-21321 · CVE-2021-21322 · CVE-2021-23337 · CVE-2021-23343 · CVE-2021-23346 · CVE-2021-23362 · CVE-2021-23364 · CVE-2021-23368 · CVE-2021-23369 · CVE-2021-23382 · CVE-2021-23383 · CVE-2021-23839 · CVE-2021-23840 · CVE-2021-23841 · CVE-2021-27292 · CVE-2021-27358 · CVE-2021-28092 · CVE-2021-28918 · CVE-2021-29418 · CVE-2021-29477 · CVE-2021-29478 · CVE-2021-29482 · CVE-2021-33502 · CVE-2021-33623

WID-SEC-W-2022-1646: Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Codeausführung

CVE-2021-23369 · CVE-2021-23383

RHSA-2021:2500: Red Hat Security Advisory: Red Hat OpenShift Enterprise security and bug fix update

CVE-2019-20920 · CVE-2019-20922 · CVE-2021-23369 · CVE-2021-23383

WID-SEC-W-2023-3032: Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

CVE-2023-5363 · CVE-2021-23383 · CVE-2021-23369 · CVE-2018-9206

RHSA-2021:4032: Red Hat Security Advisory: Openshift Logging 5.2.3 bug fix and security update

CVE-2021-23369 · CVE-2021-23383

RHSA-2023:1334: Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.2 security update

CVE-2017-12629 · CVE-2018-1000134 · CVE-2019-19919 · CVE-2019-20920 · CVE-2019-20922 · CVE-2021-23369 · CVE-2021-23383 · CVE-2021-26291

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2021-23383

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Modified

Weakness classifications: CWE-1321

Original publisher date fields

published: 2021-05-04T09:15:07.753

lastModified: 2026-10-08T22:17:07.820

2 source CPE criteria · context only

cpe:2.3:a:handlebarsjs:handlebars:*:*:*:*:*:node.js:*:*
cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*

The original JSON retains the logical configuration operators, exclusions and version bounds.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-765h-qjxv-5f44

Published

handlebars

npm

SEMVER · introduced 0 → fixed 4.7.7

Original source record · Cite this exact observation · Complete original publisher JSON