THREAT OPS › Threat News › [NVD] CVE-2026-33939 (HIGH 7.5) — Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains decorator syntax referencing an unregistered decorator (e.g. `{{*n}}`), the compiled template calls `lookupProperty(decorators, "n")
[NVD] CVE-2026-33939 (HIGH 7.5) — Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains decorator syntax referencing an unregistered decorator (e.g. `{{*n}}`), the compiled template calls `lookupProperty(decorators, "n")
CVE-2026-33939 CVSS: 7.5 HIGH Published: 2026-03-27T22:16:20.857
Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains decorator syntax referencing an unregistered decorator (e.g. `{{*n}}`), the compiled template calls `lookupProperty(decorators, "n")`, which returns `undefined`. The runtime then immedia
Indicators of compromise
- CVE-2026-33939cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-33939