Find, fix and prevent vulnerabilities in your code.

Overview

hbs is an Express.js template engine plugin for Handlebars

Affected versions of this package are vulnerable to Information Exposure. hbs mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options a file disclosure vulnerability may be triggered in downstream applications.

Remediation

There is no fixed version for hbs.

References

• PoC and Explanation