CVE-2021-23383
Fixed in a distro release EPSS 5%CVSS 5.6
The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
Products: handlebarsjs handlebars, netapp e-series_performance_analyzer
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | handlebars | 4.7.7 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | code-server | 0 |
| Chainguard | code-server-compat | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.5 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.5 | no fix |
| Chainguard | gitlab-rails-ce-18.1 | 0 |
| Chainguard | gitlab-rails-ce-18.2 | 0 |
| Chainguard | gitlab-rails-ce-18.3 | 0 |
| Chainguard | gitlab-rails-ce-18.4 | 0 |
| Chainguard | gitlab-rails-ce-18.5 | 0 |
| Chainguard | gitlab-rails-ce-18.6 | 0 |
| Chainguard | gitlab-rails-ce-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.10 | no fix |
| Chainguard | gitlab-rails-ce-assets-18.11 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.6 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.8 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.9 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.0 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.10 | no fix |
| Chainguard | gitlab-rails-ce-assets-fips-18.11 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.8 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.9 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.0 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.4 | 19.4.0-r1 |
| Chainguard | gitlab-rails-ce-doc-18.1 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.2 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.3 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.4 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.6 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.7 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.7 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.7 | 0 |
| Debian 12 | node-handlebars | 3:4.7.6+~4.1.0-2 |
| Debian 13 | node-handlebars | 3:4.7.6+~4.1.0-2 |
| Debian 14 | node-handlebars | 3:4.7.6+~4.1.0-2 |
| Ubuntu 18.04 LTS | node-handlebars | no fix |
| Ubuntu 20.04 LTS | node-handlebars | no fix |
| Ubuntu 22.04 LTS | node-handlebars | no fix |
| Ubuntu 24.04 LTS | node-handlebars | no fix |
| Ubuntu 25.10 | node-handlebars | no fix |
| Ubuntu 26.04 LTS | node-handlebars | no fix |
| Ubuntu 26.10 | node-handlebars | no fix |
| Wolfi | code-server | 0 |
| Wolfi | code-server-compat | 0 |