PT-2026-50605 · Maven · Com.Github.Jknack:Handlebars

Publicado

2026-06-17

·

Atualizado

2026-06-17

·

CVE-2026-55760

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact

Any application that passes user-controlled input to Handlebars.compile() using a FileTemplateLoader (or ClassPathTemplateLoader) is vulnerable to arbitrary file read. This is a realistic attack surface for web applications that use template names from URL path parameters, request parameters, or other user-controlled sources.

Patches

com.github.jknack:handlebars:4.5.2

Workarounds

Validate template name is derived from user input.
java
if (!file.getPath().startsWith(new File(prefix).getCanonicalPath())) {
    throw new IOException("Path traversal attempt detected: " + location);
}

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-55760
GHSA-R4GV-QR8J-P3PG

Produtos afetados

Com.Github.Jknack:Handlebars