Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
CGA-5qjf-hxc5-v6p2
published 15 days ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | commercial-gitlab-rails-ee-assets-19.5 | All versions |
Original advisory text
CGA-5qjf-hxc5-v6p2
References
- https://github.com/handlebars-lang/handlebars.js/issues/1495 URL
- https://github.com/handlebars-lang/handlebars.js/commit/0d6d8c335ad81bad1b672fc5... URL
- https://github.com/handlebars-lang/handlebars.js/commit/7372d4e9dffc9d70c09671aa... URL
- https://github.com/handlebars-lang/handlebars.js/commit/85c8783b34fc6d36145d8b53... URL
- https://github.com/handlebars-lang/handlebars.js/commit/cd38583216dce32528319163... URL
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-173692 URL
- https://www.npmjs.com/advisories/755 URL
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published20 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CGA-5qjf-hxc5-v6p2 · OSV
Track software like this
Free during beta