THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-33938 (HIGH 8.1) — Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objec

[NVD] CVE-2026-33938 (HIGH 8.1) — Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objec

lownvdPublished 2026-03-27

CVE-2026-33938 CVSS: 8.1 HIGH Published: 2026-03-27T21:17:27.587

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored in the template data context and is reachable and mutable from within a template via helpers that accept arbitrary objects. When a helper overwrites `@partial-block` with a c

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-33938cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-33938