GMS-2019-126: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

June 5, 2019 (updated May 23, 2022)

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in handlebars.

References

github.com/advisories/GHSA-q42p-pg8m-cqh6
github.com/handlebars-lang/handlebars.js/commit/7372d4e9dffc9d70c09671aa28b9392a1577fd86
github.com/handlebars-lang/handlebars.js/issues/1495
snyk.io/vuln/SNYK-JS-HANDLEBARS-173692
www.npmjs.com/advisories/755

Detect and mitigate GMS-2019-126 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →