[Git][security-tracker-team/security-tracker][master] Track fixed version for node-handlebars issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d2a13eca by Salvatore Bonaccorso at 2026-10-07T22:34:49+02:00
Track fixed version for node-handlebars issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -827,18 +827,18 @@ CVE-2026-106448 (StableLib is a stable library of useful TypeScript and JavaScri
 CVE-2026-106447 (StableLib is a stable library of useful TypeScript and JavaScript code ...)
 	NOT-FOR-US: StableLib
 CVE-2026-106446 (Handlebars provides the power necessary to let users build semantic te ...)
-	- node-handlebars <unfixed> (bug #1150246)
+	- node-handlebars 3:4.7.10-1 (bug #1150246)
 	NOTE: https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj
 	NOTE: https://github.com/handlebars-lang/handlebars.js/pull/2185
 	NOTE: Fixed by: https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2 (v4.7.10)
 	NOTE: CVE exists because of a bypass of CVE-2026-33937
 CVE-2026-106445 (Handlebars provides the power necessary to let users build semantic te ...)
-	- node-handlebars <unfixed> (bug #1150246)
+	- node-handlebars 3:4.7.10-1 (bug #1150246)
 	NOTE: https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f
 	NOTE: https://github.com/handlebars-lang/handlebars.js/pull/2185
 	NOTE: Fixed by: https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa (v4.7.10)
 CVE-2026-106444 (Handlebars provides the power necessary to let users build semantic te ...)
-	- node-handlebars <unfixed> (bug #1150246)
+	- node-handlebars 3:4.7.10-1 (bug #1150246)
 	NOTE: https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7
 	NOTE: https://github.com/handlebars-lang/handlebars.js/pull/2185
 	NOTE: Fixed by: https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725 (v4.7.10)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2a13eca6e1e9998335bf7940594fbd575f2ecb8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2a13eca6e1e9998335bf7940594fbd575f2ecb8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/c4e26ed3/attachment.htm>