{"uuid": "2e0c3de3-21ec-4644-8444-bbb35115277c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106445", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxau5otlpz2f", "content": "Two Handlebars.js vulnerability disclosures (CVE-2026-106445, CVE-2026-106446) enable RCE. Details and PoC are public. Update to 4.7.10 now.\n\n#Handlebars #HandlebarsJS #NodeJS #CVE2026106445 #CVE2026106446 #RCE #JavaScript #Vulnerability", "creation_timestamp": "2026-10-07T02:04:01.158974Z"}