CVE-2015-8861
Fixed in a distro release EPSS 3%
The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.
Products: handlebars.js_project handlebars.js
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | handlebars | 4.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | code-server | 0 |
| Chainguard | code-server-compat | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.5 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.5 | no fix |
| Chainguard | gitlab-rails-ce-18.1 | 0 |
| Chainguard | gitlab-rails-ce-18.3 | 0 |
| Chainguard | gitlab-rails-ce-18.4 | 0 |
| Chainguard | gitlab-rails-ce-18.5 | 0 |
| Chainguard | gitlab-rails-ce-18.6 | 0 |
| Chainguard | gitlab-rails-ce-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.10 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.11 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.6 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.8 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.9 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.0 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.10 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.11 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.8 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.9 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.0 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.4 | 19.4.0-r1 |
| Chainguard | gitlab-rails-ce-doc-18.1 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.2 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.3 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.4 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.6 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.7 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.7 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.7 | 0 |
| Debian 12 | mustache.js | no fix |
| Debian 13 | mustache.js | no fix |
| Debian 14 | mustache.js | no fix |
| Wolfi | code-server | 0 |
| Wolfi | code-server-compat | 0 |