handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial (high). GHSA-xhpv-hc6g-r9c6, CVE-2026-33940.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?