CVE-2026-106445 & CVE-2026-106446: Two RCE flaws in Handlebars.js, up to 9.8 rating 🔥
Two recently disclosed vulnerabilities in Handlebars.js allow an attacker to run arbitrary JavaScript on the server. Both the technical details and PoC exploit code are now public!
Search at Netlas.io:
👉 Link: https://nt.ls/KMYBH
👉 Dork: tag.name:"handlebars"
Vendor's advisory:
https://github.com/handlebars-lang/handlebars.js/security/advisories
Post #646
83
- ❤ 3
- 🔥 1