Media
CVE-2026-106444
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 35
Restablecer filtros
Crítica
CVE-2026-106446
Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)
Crítica
CVE-2026-106445
Handlebars: JavaScript Injection via Own Property Check Bypass
Media
CVE-2026-75510
Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme
Alta
ghsa-c7hr-448w-65px
MeshCentral has unsanitized data fields
Alta
CVE-2026-73617
Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete
Alta
CVE-2026-73618
Budibase: NoSQL Injection via JSON Parameter Interpolation in MongoDB Query Execution
Crítica
CVE-2026-54350
Budibase has nonymous NoSQL operator injection via published-app query templates
Media
CVE-2026-49459
DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM
Alta
CVE-2026-41683
i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header
Media
CVE-2026-40190
LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`
Crítica
CVE-2026-35216
Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step
Media
ghsa-7rx3-28cr-v5wh
Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry
Baja
ghsa-442j-39wm-28r2
Handlebars.js has a Property Access Validation Bypass in container.lookup
Alta
CVE-2026-33941
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Alta
CVE-2026-33940
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Alta
CVE-2026-33939
Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
Alta
CVE-2026-33938
Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
Crítica
CVE-2026-33937
Handlebars.js has JavaScript Injection via AST Type Confusion
Media
CVE-2026-33916
Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
Crítica
CVE-2021-23383
Prototype Pollution in handlebars
Alta
CVE-2021-32820
Insecure template handling in Express-handlebars
Alta
CVE-2019-20922
Regular Expression Denial of Service in Handlebars
Alta
CVE-2019-20920
Arbitrary Code Execution in Handlebars
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.