https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:34:18 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-106444 <p>Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML script element. When an application precompiles attacker-controlled template text and embeds the generated source directly in an inline script element, a closing script delimiter can end the element and cause following attacker-controlled markup to be parsed and executed. Ordinary server-side rendering and precompiled templates served as external JavaScript files are not affected. This issue is fixed in version 4.7.10.</p> <p>Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML script element. When an application precompiles attacker-controlled template text and embeds the generated source directly in an inline script element, a closing script delimiter can end the element and cause following attacker-controlled markup to be parsed and executed. Ordinary server-side rendering and precompiled templates served as external JavaScript files are not affected. This issue is fixed in version 4.7.10.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-106444 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-106444 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-handlebars-assets, Ubuntu:18.04:LTS: node-handlebars, Ubuntu:18.04:LTS: ruby-handlebars-assets, Ubuntu:20.04:LTS: node-handlebars, Ubuntu:20.04:LTS: ruby-handlebars-assets, Ubuntu:22.04:LTS: node-handlebars, Ubuntu:22.04:LTS: ruby-handlebars-assets, Ubuntu:24.04:LTS: node-handlebars, Ubuntu:24.04:LTS: ruby-handlebars-assets, Ubuntu:26.04:LTS: node-handlebars</p> <p>(Handlebars provides the power necessary to let users build semantic te ...)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-handlebars-assets, Ubuntu:18.04:LTS: node-handlebars, Ubuntu:18.04:LTS: ruby-handlebars-assets, Ubuntu:20.04:LTS: node-handlebars, Ubuntu:20.04:LTS: ruby-handlebars-assets, Ubuntu:22.04:LTS: node-handlebars, Ubuntu:22.04:LTS: ruby-handlebars-assets, Ubuntu:24.04:LTS: node-handlebars, Ubuntu:24.04:LTS: ruby-handlebars-assets, Ubuntu:26.04:LTS: node-handlebars</p> <p>(Handlebars provides the power necessary to let users build semantic te ...)</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-106444