handlebars-2.0.0.min.js: 8 vulnerabilities (highest severity is: 9.8)

[mend-for-github-com]

Vulnerable Library - handlebars-2.0.0.min.js

Handlebars provides the power necessary to let you build semantic templates effectively with no frustration

Library home page: https://cdnjs.cloudflare.com/ajax/libs/handlebars.js/2.0.0/handlebars.min.js

Path to vulnerable library: /WebContent/swagger/lib/handlebars-2.0.0.js

Found in HEAD commit: 44afb8a089c00949fdc70eebcf863d36c664f269

Vulnerabilities

Vulnerability	Severity	CVSS	Dependency	Type	Fixed in (handlebars version)	Remediation Possible**
CVE-2019-19919	Critical	9.8	handlebars-2.0.0.min.js	Direct	handlebars - 3.0.8,4.3.0	❌
CVE-2019-20920	High	8.1	handlebars-2.0.0.min.js	Direct	handlebars - 4.5.3	❌
WS-2020-0450	High	7.5	handlebars-2.0.0.min.js	Direct	handlebars - 4.6.0,superius/omnihubfonts - no_fix,secp256k1 - 0.6.0,parm/parm-web - no_fix,treo/treopim - 3.25.8-rc1,imikemiller/l5-swagger-redoc - v2.0,dynamic/silverstripe-locator - 1.2.1,vjeantet/silex-simple-rest-swagger - no_fix,jessekoska/swagger-ui-lumen - no_fix,dreamfactory/df-swagger-ui - no_fix,raftx24/l5-swagger - 4.0.1,restaurare/ewlist - no_fix,mahmoodbabaei/etribes-code-challenge - no_fix,tiderjian/think-core - v11.33.4,iramgutierrez/lumen-resource-api - no_fix,arionum/node - v0.1a,bseries/base_core - v1.4.0,gbksoft/yii2-swagger - v1.0.0,handlebars.js - no_fix,xjryanse/admin - v0.1.15,iwanli/laravel5-swagger - no_fix,dandisy/laravel-generator - 1.2.7,esandri/swagger-ui-big - dev-cbt-run-e2e,nehakadam/calenstyle - no_fix,thinkerforthink/thinker - v1.0.0,brt/blog-bundle - no_fix,steamuloabeaujou/api-platform - v2.1.0-beta.1,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/postcss-7.0.36,treo/treopim - 3.25.1-rc30,jnbruno/akeed - 0.0.3,evocms/evolution - 1.4.20,darkaonline/l5-swagger - dev-upgrade-to-swagger-ui-4,msbios/cpanel - v1.0.48,treolabs/treocore - 3.25.15-rc6,clubmaster/formextra - no_fix,servicestack.api.swagger.signed - 4.5.12,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/bulma-1.0.2,wheelpros/shipping-method-calculator - 2.2.5,tiderjian/qscmf - v2.0.0,imjarek/laravel-swagger - 5.0,magento/community-edition - 0.42.0-beta9,contentasaurus/c-rex-admin - v1.0.1,antwebes/api-social-bundle - no_fix,tra.eservices.formbuilder - no_fix,handlebars - 100.0.0,quantimodo/docs - dev-renovate/npm-glob-parent-vulnerability,librenms/librenms - dev-analysis-22NN39,treo/treopim - 3.25.15-rc3,kamaelkz/yii2-admin-panel - no_fix,swagger-api/swagger-ui - dev-dependabot/github_actions/master/dependabot/fetch-metadata-2.0.0,computerundsound/curserver - 2.2.0,ncapsulate.bower - no_fix,evocms/evolution - 3.1.1,wheelpros/image-generator-plus - 2.2.x-dev,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/tributejs-5.1.3,evolutioncms/evolution - 3.1.6,siu-toba/framework - dev-feature/fixApiKeysByEnv,dreadnaught/laramie - dev-feature/add-way-to-get-underlying-filtered-query-builder,zulfajuniadi/php-rest-server - no_fix,bseries/base_core - v1.0.0,librenms/librenms - 1.38-full,librenms/librenms - dev-ottorei-patch-1,seax_svm - 0.2.8,ci-blox/ignition-go - 1.0.0-beta.1,luracast/restler - 1.0.20,bnsights.mvc2 - 1.2.1.93,poqcz/restler - dev-master,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/ssri-6.0.2,librenms/librenms - dev-CiscoNac,emberjs - 1.0.5,pwptemplatepusintek - no_fix,treolabs/treocore - 3.25.12-rc4,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/bulma-1.0.3,wheelpros/shipping-method-calculator - 2.2.x-dev,zaoub/zaoub - no_fix,librenms/librenms - dev-vlan-discovery-only,wheelpros/image-generator-plus - 0.42.0-beta9,treo/treopim - 3.20.14,tribalsystems/zenario - 42085,opencontent/ocwebhookserver-ls - no_fix,treo/treopim - 3.25.15-rc10,antonio-salieri/egctweet_plain - no_fix,appserver-io/appserver - 1.1.32,keeko/developer-app - v0.2,kevupton/auto-swagger-ui - v0.1.0,nowyouwerkn/wecommerce - no_fix,poqcz/restler - 4.0.0,tribalsystems/zenario - 8.1.45530,esnanta/yii2-news - no_fix,ant-ipc-server - 2.4.1,dvixi/yii2-alpaca-json - no_fix,jagermesh/bright - v2.0.0,driberac/blank - no_fix,appserver-io/appserver - no_fix,cromwell - 0.30,restler/framework - 5.07,dolibarr/dolibarr - 14.0.0,ant-ipc-server - no_fix,bmilesp/bootstrap_extend - no_fix,treo/treopim - 3.25.19-rc3,tribalsystems/zenario - 7.5.40440,jupyterlab-nvdashboard - 0.3.0,luracast/restler - 4.0.0,jlapp/swaggervel - 2.0.x-dev,svgsynoptic2 - 4.1.4,tribalsystems/zenario - 7.0.2e,kjda/translation-bundle - no_fix,juzaweb/l5-swagger - 5.0,zquintana/lara-swag - no_fix,dreamfactory/df-swagger-ui - v3.0.0,gbksoft/yii2-swagger - v1.0.2,components/handlebars.js - v4.2.1,treo/treopim - 3.25.12-rc2,evolutioncms/evolution - 1.4.1,librenms/librenms - dev-ottorei-chrony-docs,treolabs/treocore - 1.0.0,dandisy/webcore-base - 1.0.0,lithiumdev/l5-swagger - v1.0.0,folksyfolks/l5-swagger - dev-upgrade-to-swagger-ui-4,tiderjian/think-core - v12.0.8,gbksoft/yii2-swagger - v1.0.3,tiderjian/think-core - v13.0.0,vanthao03596/fortify-limitless - 1.0.2,perfectpanel/swaggergen - no_fix,wheelpros/image-generator-plus - 2.2.5,tadpole - no_fix,vegas-cmf/media - v1.1.x-dev,firdaushatta/l5-swagger - dev-upgrade-to-swagger-ui-4,eyecatchup/restler - 0.3.0,sada/sadata-component - no_fix,ernestoponce/slimproject - no_fix,librenms/librenms - dev-pr12764,magento/community-edition - dev-converted-magento-magento2-2.4.3,adrexia/silverstripe-pure - no_fix,kubotak-is/l5-swagger - 3.0.1,sjje/swaggervel - dev-master,tribalsystems/zenario - 9.1.55143,myvisasnodejs - no_fix,kphcdr/ppphp - 2.3.0,imikemiller/l5-swagger-redoc - 4.0.1,esnanta/yii2-news - dev-update-news,gzero/api - v1.0.0,keyteqlabs/keymedia-ezpublish - no_fix,pharmit/swaggervel - 2.0.x-dev,tiderjian/think-core - v11.13.4,siu-toba/framework - dev-feature/formatoFechaConGuion,librenms/librenms - 201606,o2relax/laravel-shop - no_fix,wheelpros/shipping-method-calculator - 0.42.0-beta10,quantimodo/docs - dev-renovate/npm-path-parse-vulnerability,shopxo/shopxo - v2.2.1,tribalsystems/zenario - 7.6.41504,enlx/apidoc-template - 0.1.0,evocms/evolution - 1.4.2,frameworks/handlebars.js - 1.2.0,tribalsystems/zenario - 8.2.46436,yanev/laraadmin - no_fix,danijelsingulatiry98/swaggergen - no_fix,jagermesh/bright - 2.0.102,bseries/base_core - v1.3.0,rutatiina/accountant - no_fix,tiderjian/think-core - v11.13.10,regulus/fractal - v0.4.7,superup/mobwebbundle - no_fix,treo/treopim - 3.24.32,api-platform/core - v2.1.0-beta.1,siu-toba/framework - dev-feature/updateLibs,components/handlebars.js - v3.0.4,components/handlebars.js - v4.0.13,dynamic/silverstripe-locator - 1.1.1,treolabs/treocore - 3.24.29-rc3,treolabs/treocore - 3.25.15-rc10,dolibarr/dolibarr - dev-revert-19608-patch-2,alt3/cakephp-swagger - no_fix,envrin/apex - 1.2.2,tiderjian/think-core - v11.34.7,mediabet-kamaelkz/yii2-admin-panel - no_fix,govtnz/swagger-ui - v1.0,luracast/restler - dev-features/proxy-api,bluzphp/skeleton - 1.0.1,apex/apex - 1.2.16,pragmaticlinux/ember - no_fix,handlebars.js - no_fix,dingdayu/qiniupan - no_fix,treolabs/treocore - 3.25.18-rc2,tiderjian/think-core - v2.3.5,dreamfactory/app-admin - 1.0.4,pods-framework/pods - dev-dependabot/npm_and_yarn/node-fetch-2.6.7,treo/treopim - 3.25.3-rc1,kbrabrand/silex-swagger-ui - no_fix,cr3a7ure/core - dev-class,hos/hos-framework - no_fix,wheelpros/fitment-platform-api - 0.42.0-beta10,hadeswang/jlapp-swaggervel - 2.0.x-dev,tiderjian/think-core - v3.1.2,evolutioncms/evolution - 3.1.10,za-web/octo-gallery - no_fix,yiixwom/yii-xwom - v0.1.2,jjdoor/swagger-lume - 2.0,librenms/librenms - dev-refactor-discovery,zaoub/zaoub - dev-dependabot/npm_and_yarn/lodash-4.17.19,guitarpoet/clips-tool - dev-picture,treolabs/treocore - 3.24.27-rc5,jagermesh/bright - v2.0.26,treo/treopim - 3.25.15-rc8,luracast/restler - 2.2.0,hasangilak/l5-swagger - 5.0,computerundsound/curserver - no_fix,flexxia/flexprimeng - dev-update-angularjs,evolutioncms/evolution - 1.4.15,yaangvu/swagger-lume - 2.0,tiderjian/think-core - v11.30.4,raftx24/l5-swagger - 3.0.1,treo/treopim - 3.24.29-rc3,jupyterlab-nvdashboard - 0.3.0,servicestack.api.swagger - 4.5.12,bower - no_fix,treo/treopim - 3.25.17-rc5,appserver-io/appserver - 1.1.1-alpha1,seax_scheme - no_fix,gbksoft/yii2-swagger - v1.0.1,dersam/carty - no_fix,yangsuda/slimcms-public - no_fix,shopxo/shopxo - v2.2.8.x-dev,plagtracker/api-client - no_fix,mymdz/l5-swagger - 5.0,connexion - 2.3.0,envrin/apex - 1.0.1,xtwoend/minion-cms - no_fix,kizi/easyminer-easyminercenter - v2.0,tiderjian/think-core - v11.34.0,treolabs/treocore - 3.25.15-rc8,20steps/bricks-rest-core - v2.0.0,codesleeve/l4-asset-handlebars - no_fix,treo/treopim - 3.23.0,tiderjian/think-core - v7.2.0,riverslei/laravel-swagger - no_fix,digitalunited/wp-elastic-api - v0.1.2,folksyfolks/l5-swagger - 2.1,pods-framework/pods - dev-dependabot/npm_and_yarn/multi-cf87d80143,dunglas/api-bundle - v2.0.9,evolutioncms/evolution - 3.1.8,tasmaniski/zend-swagger - no_fix,appserver-io/appserver - 1.1.27,odn.swagger.net - no_fix,treo/treopim - 3.24.27-rc5,dhawton/l5-swagger-redoc - 3.0.1,ng-grid - 2.0.4,msbios/cpanel - no_fix,treo/treopim - 3.25.2-rc3,magento/community-edition - dev-lenaorobei-patch-2,subbly/backend - no_fix,dandisy/laravel-generator - 1.0.0,20steps/bricks-rest-core - v1.0.0-beta,dandisy/webcore-base - no_fix,opencontent/ocwebhookserver-ls - 1.0.0,evocms/evolution - 2.0.0-RC,bseries/base_core - no_fix,devisephp/cms - v.2.1.0-beta.4,treolabs/treocore - 3.25.8,codesleeve/sprockets - no_fix,tiderjian/think-core - v8.0.1,sergeyfast/eazy-jsonrpc - no_fix,neelbhanushali/laravel-apidocjs - no_fix,treolabs/treocore - 3.25.2-rc3,tiderjian/think-core - v11.19.10,rtablada/laravel-faq - 1.0.x-dev,librenms/librenms - 22.4.x-dev,tiderjian/qscmf - dev-rebuild1,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/ajv-6.12.6,openi-ict/api-builder - no_fix,zaoub/zaoub - 0.1,digitalunited/wp-elastic-api - v0.1.4,tribalsystems/zenario - 8.5.51340,nowyouwerkn/wecommerce - 1.5,treolabs/treocore - 3.23.0,imikemiller/l5-swagger-redoc - 3.0.1,flask-apispec - 0.4.0,seldatdirect/swagger-lume - no_fix,treo/treopim - 3.25.18-rc2,poqcz/restler - 2.2.0,iramgutierrez/laravel-resource-api - 1.0.27,dunglas/todomvc-bundle - no_fix,svgsynoptic2 - 4.1.4,pyntax/pyntax - 0.9.2,wheelpros/fitment-platform-api - 2.2.5,bmilesp/bootstrap_extend - 2.1.x-dev,pods-framework/pods - 2.7,restler/framework - 4.0.0,electrscash - 1.1.1,tribalsystems/zenario - 8.3.47997,cr3a7ure/core - no_fix,opencontent/ocwebhookserver-ls - 1.1.4,dreadnaught/laramie - dev-main,dandisy/laravel-generator - dev-dependabot/npm_and_yarn/templates/vuejs/js/eslint-4.19.1,luracast/restler - 5.0.6,logiks/logiks-core - no_fix,dreadnaught/laramie - dev-feature/bulk-hook-refactor,tiderjian/think-core - v11.13.6,treo/treopim - foo,frameworks/handlebars.js - no_fix,kennersoft/kennercore - 3.25.35,moxie - 1.0.4,acosf/archersys - 1.0,logiks/logiks-core - v4.0.0,emberjs - 1.3.0,magento/community-edition - 2.2.0-RC1.1,open-resource-manager/core - no_fix,contentasaurus/c-rex-admin - v1.0.7,dennis1804/iq-swagger - dev-dependabot/composer/illuminate/support-approx-8.16,rutatiina/ui - no_fix,evocms/evolution - dev-fix/evo-3x-184,tariqul/multiauth - no_fix,librenms/librenms - dev-php73,zfcampus/zf-apigility-documentation-swagger - 0.9.0,pmurkin/bootstrapi - no_fix,pyntax/pyntax - dev-develop/pyntax-api-module,damian-nz/l5-swagger - 4.0.0,evolution-cms-extras/doclister - no_fix,nowyouwerkn/wecommerce - dev-moon,magento/community-edition - 0.42.0-beta10,subbly/cms - dev-packaging,api-platform/core - dev-sf-dev-2,mreko/l5-swagger - 4.0.1,dreamfactory/dreamfactory - dev-dependabot/add-v2-config-file,g3n1us/editor - no_fix,fxmonster/l5-swagger - 5.0,spescina/mediabrowser - 3.0.0,allmobilize/amazeui - v1.0.0,tiderjian/think-core - v8.0.4,dreamfactory/dreamfactory - 2.1.0,librenms/librenms - 201507,helingfeng/l5-swagger - 5.0,evolutioncms/evolution - 1.3.0,ralphowino/swagger - no_fix,xjryanse/admin - v0.0.1,ramzyvirani/laravel-boilerplate - dev-snyk-fix-6118335e7ee4db4dc6929725f8b9be70,magetest/magento - v2.0.1.0,digitalunited/wp-elastic-api - v0.1.3,shopxo/shopxo - no_fix,folksyfolks/l5-swagger - 3.1.4,kphcdr/ppphp - 1.0,restler/framework - dev-master,treo/treopim - 3.25.0-rc20,shopxo/shopxo - v2.2.5.x-dev,components/handlebars.js - v4.6.0,tractorcow/web-console - v0.9.5,emberjspackage - no_fix,evocms/evolution - dev-fix/codemirror-remove-addon-tern,karmanodemodules - no_fix,danijelsingularity98/swaggergen - no_fix,cal127/phpcrud - v0.1,clubmaster/formextra - 1.0,treolabs/treocore - 3.25.17-rc5,dunglas/json-ld-api-bundle - dev-sf-dev-2,jnbruno/akeed - no_fix,dreadnaught/laramie - dev-dependabot/composer/guzzlehttp/psr7-1.8.5,andriybazyuta/l4-asset-emblem - no_fix,dandisy/webcore - 1.0.6,flask-apispec - 0.4.0,tiderjian/think-core - v12.0.0,elefant/app-products - 1.0.0,isobar-nz/web-console - 2.0.2,dvixi/yii2-alpaca-json - 0.9-dev,tribalsystems/zenario - 7.7.42682,evocms/evolution - 3.1.20,brt/blog-bundle - 0.8.1,mpcmf/mpcmf-web-app - no_fix,treo/treopim - 3.25.1-rc24,smskin/l5-swagger - 5.0,flask-restful-swagger - no_fix,flexxia/flexprimeng - dev-dependabot/npm_and_yarn/css/postcss/y18n-3.2.2,dreamfactory/df-api-docs-ui - 1.1.0,lanos/yetiweb - no_fix,dunglas/api-bundle - v2.0.0-rc.5,treo/treopim - 3.24.1,luracast/restler - 5.07,flask-apispec - 0.7.0,gzero/api - v0.0.1,zfcampus/zf-apigility-documentation-swagger - no_fix,xjryanse/admin - v0.0.145,wheelpros/image-generator-plus - 0.42.0-beta10,adaclare/server-manager - no_fix,toml - 0.1.27,latrell/swagger - 1.0.2,opencontent/ocwebhookserver-ls - dev-job-control,antonio-salieri/egc_tweet - no_fix,treolabs/treocore - 3.25.19-rc3,treolabs/treocore - 3.24.1,treolabs/treocore - 3.25.0-rc20,flex360/pilot - no_fix,handlebars - 4.1.2-0,sfs/admin-bundle - dev-feature/sf5,components/handlebars.js - dev-jaylinski-patch-1,opencontent/ocopendata_forms-ls - 1.6.10,klezbucket/laravelito - no_fix,activelamp/swagger-ui-bundle - v0.1.2,gajendrajain20/laravel-pioneer-cms - no_fix,librenms/librenms - dev-dependabot/composer/composer/composer-2.1.9,nowyouwerkn/wecommerce - dev-satellite,dreamfactory/app-admin - no_fix,libgraviton/swagger-ui - v1.0,firdaushatta/l5-swagger - 5.0,centurion/app - no_fix,treolabs/treocore - 3.25.5-rc3,kubotak-is/l5-swagger - 4.0.1,quantimodo/docs - dev-renovate/npm-nanoid-vulnerability,fmarmo/swagger-lume - 2.0,bseries/base_core - v1.5.0,dolibarr/dolibarr - dev-scrutinizer-patch-2,yangsuda/slimcms - 2.0.1.x-dev,dandisy/adminlte-templates - 1.2.2,wheelpros/fitment-platform-api - 2.2.x-dev,evocms/evolution - dev-frozen_urls,librenms/librenms - dev-dependabot/npm_and_yarn/follow-redirects-1.14.8,raftx24/l5-swagger - v2.0,shopxo/shopxo - v2.2.7,treolabs/treocore - 3.25.15-rc3,osidea/eosadm - no_fix,restler/framework - 3.0.0-RC1,tiderjian/think-core - v11.30.0,dwij/laraadmin - 1.0.1,tribalsystems/zenario - 9.0.55141,evocms/evolution - dev-shit-and-sticks,basalam/laravel-kendo-ui - no_fix,jessekoska/swagger-lume - v2.0.24,apex/apex - 1.5.0,tuupke/laravel-swagger - 2.0.0,insidion/swagger-bundle - 1.0.0,mreko/l5-swagger - v2.0,sjje/swaggervel - 2.0.x-dev,laminas-api-tools/api-tools-documentation-swagger - 1.3.x-dev,shopxo/shopxo - v2.0.3,speedovation/laravelmart - no_fix,components/handlebars.js - v3.0.8,flex360/pilot - dev-dependabot/npm_and_yarn/dns-packet-1.3.4,squareproton/bond - no_fix,auspice - no_fix,dhawton/l5-swagger-redoc - 4.0.1,w3yyb/phalphp - no_fix,jsdom - 11.11.0,kbrabrand/zf2-swagger-ui - no_fix,flask-restful-swagger - no_fix,jinsoft/laravel-swagger - no_fix,restler/framework - 5.0.6,dennis1804/iq-swagger - no_fix,dunglas/api-bundle - v2.0.5,ea/yii2-contact-manager - no_fix,gbksoft/yii2-swagger - v1.1.0,dhawton/l5-swagger-redoc - v2.0,pmvc-app/swagger_ui - no_fix,connexion - 2.3.0,vanderlee/swaggergen - 2.0.1,jym.identityserver.swagger - no_fix,davigs/swagger-lume - 2.0,evocms/evolution - dev-Issue24,bokeh - 0.9.0,firdaushatta/l5-swagger - dev-firdaushatta-patch-1,emberjs - 1.0.0,yangsuda/slimcms - 2.0.0,evolutioncms/evolution - 1.4.17,pronto/mobilebundle - 0.2.2,lemonvine/yii2-adminlte - v1.0.1,mmitasch/flow4ember - no_fix,evocms/evolution - dev-fix/3x-refactor,gbksoft/yii2-swagger - v1.0.4,seax_util - 0.1.2,tiderjian/think-core - v11.x-dev,swagger-api/swagger-ui - 3.x-dev,nhiepphong/backend - no_fix,shopxo/shopxo - 2.1.0,davin.bao/apidoc - no_fix,msbios/cpanel - v1.0.44,osidea/eosadm - 0.0.2-beta.1,darkaonline/l5-swagger - 3.0.1,brt/blog-bundle - 0.8.0,librenms/librenms - dev-dependabot/npm_and_yarn/elliptic-6.5.4,jacoob/vino-blog - no_fix,librenms/librenms - dev-dependabot/npm_and_yarn/axios-1.7.4,elefant/cms - dev-master,treo/treopim - 3.25.15-rc6,dunglas/api-bundle - dev-sf-dev-2,brt/blog-bundle - 0.8.3.2,tiderjian/think-core - v11.34.3,pleio/pleio_rest - no_fix,treolabs/treocore - 3.24.0,dolibarr/dolibarr - dev-revert-15607-12edit-extrafield-computed-multiline,damian-nz/l5-swagger - no_fix,treolabs/treocore - 3.25.3,damian-nz/l5-swagger - dev-master,pods-framework/pods - dev-feature/4098-wpmu-queries,cr3a7ure/core - dev-docminor,kennersoft/kennercore - dev-documentation-v1,leaphly/leaphly-sandbox - no_fix,isobar-nz/web-console - 2.1.1,treo/treopim - 3.25.5-rc3,raml.parser - 1.0.7,treolabs/treocore - 3.24.32,wheelpros/shipping-method-calculator - 0.42.0-beta9,librenms/librenms - 22.6.0,emberjs - 2.2.0,pods-framework/pods - 2.7.2,smellems/wet4 - dev-master,shopxo/shopxo - v2.2.0,siu-toba/framework - dev-feature/chngRestExceptions,siu-toba/framework - dev-feature/addIdFuenteUsuarios,dedegunawan/my-framework - no_fix,sfs/admin-bundle - 1.0.0,dolibarr/dolibarr - 12.1.x-dev,wheelpros/fitment-platform-api - 0.42.0-beta9,treo/treopim - 3.24.0,kartik-v/yii2-widget-typeahead - no_fix,phprest/phprest-sample-heroku-app - no_fix,efwplusruntime - no_fix,mreko/l5-swagger - 3.0.1,yiixwom/yii-xwom - 1.0.6,pods-framework/pods - dev-feature/2.8/WPML,siu-toba/framework - v3.3.6,digitalunited/wp-elastic-api - v0.1,nowyouwerkn/wecommerce - dev-main,dolibarr/dolibarr - dev-scrutinizer-patch-4,handlebars - 4.6.0,kubotak-is/l5-swagger - v2.0,rodchyn/api-platform-core - v2.1.0-beta.1,woldy/cms - no_fix,dreamfactory/df-swagger-ui - 0.4.0,tasmaniski/laminas-swagger - no_fix,jagermesh/bright - dev-dependabot/composer/phpseclib/phpseclib-tw-2or-tw-3,siu-toba/framework - dev-support/v3.3,pods-framework/pods - dev-dependabot/npm_and_yarn/async-2.6.4,midiator.webclient - 1.0.105,pronto/mobilebundle - 2.0.1-beta1,treolabs/treocore - 3.25.1-rc24,vsmoraes/swagger-ui-bundle - v0.1.2,opencontent/ocopendata_forms-ls - 1.5.2,darkaonline/l5-swagger - v2.0,mpcmf/mpcmf-web-app - 1.0.0.x-dev,frameworks/handlebars.js - 0.1.3,frameworks/handlebars.js - 1.1.0,firdaushatta/l5-swagger - dev-firdaushatta-patch-2,rich2k/l5-swagger - 5.0,tribalsystems/zenario - 8.0.44237,tiderjian/think-core - v12.0.5,opencontent/ocopendata_forms-ls - no_fix,tribalsystems/zenario - 8.9.55141,isobar-nz/web-console - 2.0.x-dev,pixelstudio/updraftplus - no_fix,kennersoft/kennercore - 3.25.37,pronto/mobilebundle - 0.1.0,xjryanse/admin - v0.0.148,bokeh - 0.9.0,magento/community-edition - 2.2.x-dev,speedovation/laravelmart - 0.2,pods-framework/pods - dev-test/skc-testing-3,evocms/evolution - dev-users,alexmaramaldo/swaggervel-2 - no_fix,visiosoft/l5-swagger - 3.x-dev,haotx/swagger-lume - no_fix,egov/vws - no_fix,osfed/l4crud - no_fix,pods-framework/pods - dev-feature/numbers-support-leading-zeroes,evolutioncms/evolution - no_fix,vsmoraes/swagger-ui-bundle - no_fix,flask-apispec - 0.7.0	❌
WS-2019-0064	High	7.3	handlebars-2.0.0.min.js	Direct	3.0.7,4.0.14,4.1.2,mreko/l5-swagger - v2.0,restler/framework - 3.0.0-RC1,dreadnaught/laramie - dev-feature/bulk-hook-refactor,dhawton/l5-swagger-redoc - 4.0.1,rtablada/laravel-faq - 1.0.x-dev,brt/blog-bundle - 0.8.0,dolibarr/dolibarr - 12.1.x-dev,treolabs/treocore - 3.25.18-rc2,dunglas/api-bundle - dev-sf-dev-2,rodchyn/api-platform-core - v2.1.0-beta.1,opencontent/ocopendata_forms-ls - 1.5.2,tariqul/multiauth - no_fix,brt/blog-bundle - 0.8.3.2,speedovation/laravelmart - 0.2,folksyfolks/l5-swagger - 3.1.4,tiderjian/think-core - v2.3.5,nhiepphong/backend - no_fix,tiderjian/think-core - v7.2.0,tasmaniski/zend-swagger - no_fix,brt/blog-bundle - 0.8.1,treo/treopim - 3.25.0-rc20,pronto/mobilebundle - 2.0.1-beta1,open-resource-manager/core - no_fix,msbios/cpanel - no_fix,ng-grid - 2.0.4,dolibarr/dolibarr - dev-scrutinizer-patch-2,tribalsystems/zenario - 8.5.51340,midiator.webclient - 1.0.105,components/handlebars.js - v3.0.4,treolabs/treocore - 3.25.17-rc5,pronto/mobilebundle - 0.1.0,antonio-salieri/egctweet_plain - no_fix,dunglas/api-bundle - v2.0.0-rc.5,dunglas/api-bundle - v2.0.5,yangsuda/slimcms-public - no_fix,pods-framework/pods - dev-dependabot/npm_and_yarn/multi-cf87d80143,sjje/swaggervel - 2.0.x-dev,sfs/admin-bundle - dev-feature/sf5,adaclare/server-manager - no_fix,libgraviton/swagger-ui - v1.0,evolution-cms-extras/doclister - no_fix,shopxo/shopxo - v2.2.7,evolutioncms/evolution - 1.4.17,damian-nz/l5-swagger - dev-master,pods-framework/pods - dev-feature/2.8/WPML,treolabs/treocore - 3.23.0,evocms/evolution - 2.0.0-RC,api-platform/core - v2.1.0-beta.1,wheelpros/image-generator-plus - 0.42.0-beta10,frameworks/handlebars.js - 1.2.0,tribalsystems/zenario - 7.7.42682,karmanodemodules - no_fix,jessekoska/swagger-lume - v2.0.24,ralphowino/swagger - no_fix,tiderjian/qscmf - dev-rebuild1,tractorcow/web-console - v0.9.5,danijelsingularity98/swaggergen - no_fix,evocms/evolution - dev-fix/3x-refactor,zfcampus/zf-apigility-documentation-swagger - 0.9.0,kbrabrand/zf2-swagger-ui - no_fix,acosf/archersys - 1.0,treolabs/treocore - 3.25.2-rc3,lanos/yetiweb - no_fix,w3yyb/phalphp - no_fix,osidea/eosadm - no_fix,treolabs/treocore - 3.25.0-rc20,opine/layout - v2.0.2,dreamfactory/df-swagger-ui - 0.4.0,davin.bao/apidoc - no_fix,xjryanse/admin - v0.0.145,tiderjian/think-core - v8.0.1,wheelpros/fitment-platform-api - 2.2.5,evolutioncms/evolution - 1.3.0,eglober.ics.theme - no_fix,rapidfire.view - 3.1.2.8,bmilesp/bootstrap_extend - 2.1.x-dev,librenms/librenms - dev-dependabot/npm_and_yarn/axios-1.7.4,tiderjian/think-core - v11.34.0,yangsuda/slimcms - 2.0.1.x-dev,sada/sadata-component - no_fix,elefant/app-products - 1.0.0,dandisy/webcore - 1.0.6,tiderjian/think-core - v11.30.0,yanev/laraadmin - no_fix,magetest/magento - v2.0.1.0,rutatiina/ui - no_fix,shopxo/shopxo - v2.0.3,pods-framework/pods - 2.7,pyntax/pyntax - 0.9.2,librenms/librenms - 201606,spescina/mediabrowser - 3.0.0,dunglas/json-ld-api-bundle - dev-sf-dev-2,jagermesh/bright - v2.0.22,treo/treopim - 3.25.15-rc8,dennis1804/iq-swagger - no_fix,darkaonline/l5-swagger - 3.0.1,pronto/mobilebundle - 0.2.2,20steps/bricks-rest-core - v2.0.0,pods-framework/pods - dev-dependabot/npm_and_yarn/node-fetch-2.6.7,evolutioncms/evolution - 1.4.1,evolutioncms/evolution - 3.1.10,digitalunited/wp-elastic-api - v0.1.4,jnbruno/akeed - no_fix,pmvc-app/swagger_ui - no_fix,flask-apispec - 0.4.0,rapidfire.view - 1.0.35,g3n1us/editor - no_fix,svgsynoptic2 - 4.1.4,helingfeng/l5-swagger - 5.0,dvixi/yii2-alpaca-json - no_fix,wheelpros/fitment-platform-api - 2.2.x-dev,gbksoft/yii2-swagger - v1.0.3,bokeh - 0.9.0,emberjs - 1.0.0,latrell/swagger - 1.0.2,siu-toba/framework - dev-feature/addIdFuenteUsuarios,myvisasnodejs - no_fix,librenms/librenms - 22.6.0,flex360/pilot - no_fix,kubotak-is/l5-swagger - v2.0,siu-toba/framework - dev-feature/chngRestExceptions,sfs/admin-bundle - 1.0.0,allmobilize/amazeui - v1.0.0,subbly/cms - dev-packaging,opencontent/ocopendata_forms-ls - 1.6.10,librenms/librenms - dev-php73,jnbruno/akeed - 0.0.3,yangsuda/slimcms - 2.0.0,appserver-io/appserver - 1.1.32,tiderjian/think-core - v11.34.3,treo/treopim - 3.25.15-rc6,treolabs/treocore - 3.25.5-rc3,dynamic/silverstripe-locator - 1.1.1,mreko/l5-swagger - 4.0.1,seax_svm - 0.2.8,magento/community-edition - 0.42.0-beta10,pods-framework/pods - dev-dependabot/npm_and_yarn/async-2.6.4,treo/treopim - 3.24.1,svgsynoptic2 - 4.1.4,jinsoft/laravel-swagger - no_fix,dreamfactory/app-admin - no_fix,frameworks/handlebars.js - 0.1.3,pods-framework/pods - 2.7.2,restler/framework - dev-master,dolibarr/dolibarr - dev-revert-15607-12edit-extrafield-computed-multiline,egov/vws - no_fix,treolabs/treocore - 3.25.19-rc3,wheelpros/shipping-method-calculator - 2.2.5,xjryanse/admin - v0.0.1,treolabs/treocore - 3.24.1,librenms/librenms - 201507,dolibarr/dolibarr - dev-scrutinizer-patch-4,tiderjian/think-core - v8.0.4,wheelpros/image-generator-plus - 2.2.x-dev,restler/framework - 5.0.6,tiderjian/think-core - v11.x-dev,gajendrajain20/laravel-pioneer-cms - no_fix,pods-framework/pods - dev-feature/numbers-support-leading-zeroes,bseries/base_core - v1.0.0,kennersoft/kennercore - 3.25.35,moxie - 1.0.4,tiderjian/think-core - v12.0.5,firdaushatta/l5-swagger - dev-upgrade-to-swagger-ui-4,dhawton/l5-swagger-redoc - v2.0,dreadnaught/laramie - dev-main,dedegunawan/my-framework - no_fix,shopxo/shopxo - v2.2.0,ember.js - no_fix,iramgutierrez/laravel-resource-api - 1.0.27,librenms/librenms - dev-CiscoNac,dandisy/adminlte-templates - 1.2.2,gbksoft/yii2-swagger - v1.0.4,jsdom - 11.11.0,vsmoraes/swagger-ui-bundle - no_fix,nowyouwerkn/wecommerce - dev-satellite,regulus/fractal - v0.4.7,librenms/librenms - dev-dependabot/npm_and_yarn/elliptic-6.5.4,imikemiller/l5-swagger-redoc - 4.0.1,tribalsystems/zenario - 8.9.55141,firdaushatta/l5-swagger - 5.0,poqcz/restler - 4.0.0,apex/apex - 1.5.0,components/handlebars.js - dev-jaylinski-patch-1,librenms/librenms - dev-dependabot/composer/composer/composer-2.1.9,smskin/l5-swagger - 5.0,treolabs/treocore - 3.24.0,swagger-api/swagger-ui - 3.x-dev,ea/yii2-contact-manager - no_fix,elefant/cms - dev-master,siu-toba/framework - dev-support/v3.3,wheelpros/fitment-platform-api - 0.42.0-beta9,tiderjian/think-core - v13.0.0,clubmaster/formextra - no_fix,tadpole - no_fix,sjje/swaggervel - dev-master,emberjs - 1.3.0,dolibarr/dolibarr - dev-revert-19608-patch-2,luracast/restler - 1.0.20,treolabs/treocore - 3.25.15-rc3,is-iot-ipc-server - no_fix,zfcampus/zf-apigility-documentation-swagger - no_fix,shopxo/shopxo - 2.1.0,juzaweb/l5-swagger - 5.0,wheelpros/image-generator-plus - 2.2.5,pmurkin/bootstrapi - no_fix,kubotak-is/l5-swagger - 4.0.1,smellems/wet4 - dev-master,woldy/cms - no_fix,parm/parm-web - no_fix,treo/treopim - 3.25.1-rc24,fmarmo/swagger-lume - 2.0,evocms/evolution - dev-fix/evo-3x-184,dreamfactory/df-swagger-ui - no_fix,zquintana/lara-swag - no_fix,cromwell - 0.30,tiderjian/qscmf - v2.0.0,imikemiller/l5-swagger-redoc - 3.0.1,tiderjian/think-core - v11.13.4,rich2k/l5-swagger - 5.0,tiderjian/think-core - v11.30.4,openi-ict/api-builder - no_fix,seax_scheme - no_fix,kartik-v/yii2-widget-typeahead - no_fix,opencontent/ocopendata_forms-ls - no_fix,kennersoft/kennercore - dev-documentation-v1,connexion - 2.3.0,digitalunited/wp-elastic-api - v0.1,keeko/developer-app - v0.2,evocms/evolution - 3.1.1,yiixwom/yii-xwom - v0.1.2,hasangilak/l5-swagger - 5.0,antonio-salieri/egc_tweet - no_fix,mmitasch/flow4ember - no_fix,damian-nz/l5-swagger - no_fix,lithiumdev/l5-swagger - v1.0.0,keyteqlabs/keymedia-ezpublish - no_fix,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/postcss-7.0.36,mpcmf/mpcmf-web-app - 1.0.0.x-dev,tasmaniski/laminas-swagger - no_fix,evocms/evolution - dev-users,treo/treopim - 3.24.27-rc5,treo/treopim - 3.25.5-rc3,kennersoft/kennercore - 3.25.37,opine/layout - v2.0.6,steamuloabeaujou/api-platform - v2.1.0-beta.1,flex360/pilot - dev-dependabot/npm_and_yarn/dns-packet-1.3.4,vanthao03596/fortify-limitless - 1.0.2,jacoob/vino-blog - no_fix,mahmoodbabaei/etribes-code-challenge - no_fix,magento/community-edition - 2.2.x-dev,smarttheme.ui - no_fix,vswashbuckle.core - 1.0.1,vsmoraes/swagger-ui-bundle - v0.1.2,vanderlee/swaggergen - 2.0.1,treo/treopim - 3.24.32,dynamic/silverstripe-locator - 1.2.1,evolutioncms/evolution - no_fix,gbksoft/yii2-swagger - v1.1.0,openrastaswagger - 1.0.3.35,xjryanse/admin - v0.0.148,mymdz/l5-swagger - 5.0,handlebars - 100.0.0,dolibarr/dolibarr - 14.0.0,treolabs/treocore - 3.24.32,evocms/evolution - dev-Issue24,bluzphp/skeleton - 1.0.1,kphcdr/ppphp - 1.0,secp256k1 - 0.6.0,seax_util - 0.1.2,restler/framework - 5.07,isobar-nz/web-console - 2.0.x-dev,odn.swagger.net - no_fix,darkaonline/l5-swagger - v2.0,contentasaurus/c-rex-admin - v1.0.1,treolabs/treocore - 3.25.3,nowyouwerkn/wecommerce - dev-main,govtnz/swagger-ui - v1.0,centurion/app - no_fix,tribalsystems/zenario - 8.0.44237,dandisy/laravel-generator - 1.0.0,pods-framework/pods - dev-test/skc-testing-3,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/tributejs-5.1.3,servicestack.api.swagger - 4.5.12,laminas-api-tools/api-tools-documentation-swagger - 1.3.x-dev,opencontent/ocwebhookserver-ls - 1.1.4,pwptemplatepusintek - no_fix,treo/treopim - 3.25.15-rc3,librenms/librenms - dev-vlan-discovery-only,treolabs/treocore - 3.25.1-rc24,pleio/pleio_rest - no_fix,haotx/swagger-lume - no_fix,treo/treopim - 3.24.0,luracast/restler - 2.2.0,tuupke/laravel-swagger - 2.0.0,appserver-io/appserver - no_fix,pods-framework/pods - dev-feature/4098-wpmu-queries,emberjspackage - no_fix,quantimodo/docs - dev-renovate/npm-glob-parent-vulnerability,yiixwom/yii-xwom - 1.0.6,guitarpoet/clips-tool - dev-picture,wheelpros/shipping-method-calculator - 0.42.0-beta9,ncapsulate.bower - no_fix,firdaushatta/l5-swagger - dev-firdaushatta-patch-1,isobar-nz/web-console - 2.1.1,adrexia/silverstripe-pure - no_fix,osfed/l4crud - no_fix,mreko/l5-swagger - 3.0.1,frameworks/handlebars.js - 1.1.0,treo/treopim - 3.20.14,cr3a7ure/core - dev-docminor,phprest/phprest-sample-heroku-app - no_fix,o2relax/laravel-shop - no_fix,visiosoft/l5-swagger - 3.x-dev,librenms/librenms - 1.38-full,leaphly/leaphly-sandbox - no_fix,api-platform/core - dev-sf-dev-2,tribalsystems/zenario - 7.0.2e,opine/layout - v2.0.7,evocms/evolution - dev-frozen_urls,shopxo/shopxo - v2.2.1,pharmit/swaggervel - 2.0.x-dev,siu-toba/framework - dev-feature/fixApiKeysByEnv,activelamp/swagger-ui-bundle - v0.1.2,tra.eservices.formbuilder - no_fix,wheelpros/image-generator-plus - 0.42.0-beta9,treo/treopim - 3.25.17-rc5,jym.identityserver.swagger - no_fix,librenms/librenms - dev-pr12764,tiderjian/think-core - v3.1.2,esnanta/yii2-news - dev-update-news,tribalsystems/zenario - 9.0.55141,xjryanse/admin - v0.1.15,magento/community-edition - dev-converted-magento-magento2-2.4.3,kphcdr/ppphp - 2.3.0,efwplusruntime - no_fix,evocms/evolution - 1.4.20,jessekoska/swagger-ui-lumen - no_fix,opencontent/ocwebhookserver-ls - no_fix,magento/community-edition - dev-lenaorobei-patch-2,firdaushatta/l5-swagger - dev-firdaushatta-patch-2,alexmaramaldo/swaggervel-2 - no_fix,auspice - no_fix,flask-restful-swagger - no_fix,tribalsystems/zenario - 7.5.40440,librenms/librenms - dev-analysis-22NN39,vegas-cmf/media - v1.1.x-dev,davigs/swagger-lume - 2.0,flask-apispec - 0.4.0,magento/community-edition - 0.42.0-beta9,flask-restful-swagger - no_fix,kubotak-is/l5-swagger - 3.0.1,ci-blox/ignition-go - 1.0.0-beta.1,librenms/librenms - dev-ottorei-patch-1,kjda/translation-bundle - no_fix,raftx24/l5-swagger - v2.0,zulfajuniadi/php-rest-server - no_fix,alt3/cakephp-swagger - no_fix,wheelpros/shipping-method-calculator - 2.2.x-dev,esandri/swagger-ui-big - dev-cbt-run-e2e,shopxo/shopxo - v2.2.8.x-dev,imikemiller/l5-swagger-redoc - v2.0,librenms/librenms - dev-ottorei-chrony-docs,brt/blog-bundle - no_fix,esnanta/yii2-news - no_fix,emberjs - 1.0.5,squareproton/bond - no_fix,folksyfolks/l5-swagger - dev-upgrade-to-swagger-ui-4,speedovation/laravelmart - no_fix,insidion/swagger-bundle - 1.0.0,librenms/librenms - dev-refactor-discovery,tribalsystems/zenario - 8.2.46436,dunglas/api-bundle - v2.0.9,envrin/apex - 1.2.2,bmilesp/bootstrap_extend - no_fix,opine/layout - v2.0.8,bnsights.mvc2 - 1.2.1.93,treo/treopim - 3.25.8-rc1,dwij/laraadmin - 1.0.1,dreamfactory/dreamfactory - dev-dependabot/add-v2-config-file,tiderjian/think-core - v12.0.8,treo/treopim - 3.25.19-rc3,darkaonline/l5-swagger - dev-upgrade-to-swagger-ui-4,basalam/laravel-kendo-ui - no_fix,dreamfactory/df-swagger-ui - v3.0.0,evocms/evolution - dev-shit-and-sticks,bower - no_fix,danijelsingulatiry98/swaggergen - no_fix,xerneas.template - 1.0.6,siu-toba/framework - v3.3.6,bseries/base_core - v1.5.0,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/bulma-1.0.2,tribalsystems/zenario - 9.1.55143,tiderjian/think-core - v11.34.7,handlebars.js - 4.1.2,siu-toba/framework - dev-feature/formatoFechaConGuion,luracast/restler - 4.0.0,treolabs/treocore - 3.24.29-rc3,bokeh - 0.9.0,bseries/base_core - v1.4.0,handlebars - 4.0.14,raftx24/l5-swagger - 4.0.1,treo/treopim - 3.25.12-rc2,jlapp/swaggervel - 2.0.x-dev,iramgutierrez/lumen-resource-api - no_fix,evolutioncms/evolution - 1.4.15,dvixi/yii2-alpaca-json - 0.9-dev,ant-ipc-server - no_fix,dreadnaught/laramie - dev-feature/add-way-to-get-underlying-filtered-query-builder,nowyouwerkn/wecommerce - 1.5,iwanli/laravel5-swagger - no_fix,eyecatchup/restler - 0.3.0,msbios/cpanel - v1.0.48,rutatiina/accountant - no_fix,msbios/cpanel - v1.0.44,nehakadam/calenstyle - no_fix,neelbhanushali/laravel-apidocjs - no_fix,devisephp/cms - v.2.1.0-beta.4,shopxo/shopxo - no_fix,tribalsystems/zenario - 42085,za-web/octo-gallery - no_fix,tiderjian/think-core - v11.19.10,quantimodo/docs - dev-renovate/npm-nanoid-vulnerability,restaurare/ewlist - no_fix,treo/treopim - 3.23.0,pyntax/pyntax - dev-develop/pyntax-api-module,nowyouwerkn/wecommerce - no_fix,appserver-io/appserver - 1.1.1-alpha1,librenms/librenms - dev-dependabot/npm_and_yarn/follow-redirects-1.14.8,subbly/backend - no_fix,tiderjian/think-core - v11.13.10,yaangvu/swagger-lume - 2.0,dreamfactory/app-admin - 1.0.4,codesleeve/sprockets - no_fix,wheelpros/fitment-platform-api - 0.42.0-beta10,tiderjian/think-core - v12.0.0,opencontent/ocwebhookserver-ls - 1.0.0,enlx/apidoc-template - 0.1.0,dandisy/laravel-generator - dev-dependabot/npm_and_yarn/templates/vuejs/js/eslint-4.19.1,sergeyfast/eazy-jsonrpc - no_fix,dandisy/webcore-base - no_fix,rs.js - no_fix,shopxo/shopxo - v2.2.5.x-dev,appserver-io/appserver - 1.1.27,gzero/api - v1.0.0,bseries/base_core - v1.3.0,tribalsystems/zenario - 7.6.41504,superius/omnihubfonts - no_fix,opine/layout - v2.0.1,apex/apex - 1.2.16,raftx24/l5-swagger - 3.0.1,gbksoft/yii2-swagger - v1.0.2,computerundsound/curserver - no_fix,rapidfire.view - 2.2.2,components/handlebars.js - v3.0.8,treo/treopim - 3.24.29-rc3,plagtracker/api-client - no_fix,evocms/evolution - 3.1.20,flask-apispec - 0.7.0,siu-toba/framework - dev-feature/updateLibs,gbksoft/yii2-swagger - v1.0.0,dandisy/webcore-base - 1.0.0,treolabs/treocore - 3.24.27-rc5,treolabs/treocore - 3.25.12-rc4,fxmonster/l5-swagger - 5.0,wheelpros/shipping-method-calculator - 0.42.0-beta10,treolabs/treocore - 3.25.15-rc8,evocms/evolution - 1.4.2,treolabs/treocore - 3.25.8,jjdoor/swagger-lume - 2.0,andriybazyuta/l4-asset-emblem - no_fix,treo/treopim - 3.25.2-rc3,hos/hos-framework - no_fix,treo/treopim - 3.25.1-rc30,ernestoponce/slimproject - no_fix,treo/treopim - 3.25.18-rc2,zaoub/zaoub - no_fix,handlebars - 3.0.7,thinkerforthink/thinker - v1.0.0,evolutioncms/evolution - 3.1.8,swagger-api/swagger-ui - dev-dependabot/github_actions/master/dependabot/fetch-metadata-2.0.0,luracast/restler - 5.0.6,evolutioncms/evolution - 3.1.6,kizi/easyminer-easyminercenter - v2.0,opencontent/ocwebhookserver-ls - dev-job-control,cr3a7ure/core - dev-class,cal127/phpcrud - v0.1,osidea/eosadm - 0.0.2-beta.1,c21.core.app.domain - no_fix,seldatdirect/swagger-lume - no_fix,dennis1804/iq-swagger - dev-dependabot/composer/illuminate/support-approx-8.16,20steps/bricks-rest-core - v1.0.0-beta,dersam/carty - no_fix,driberac/blank - no_fix,mediabet-kamaelkz/yii2-admin-panel - no_fix,isobar-nz/web-console - 2.0.2,perfectpanel/swaggergen - no_fix,connexion - 2.3.0,poqcz/restler - 2.2.0,vjeantet/silex-simple-rest-swagger - no_fix,zaoub/zaoub - 0.1,bseries/base_core - no_fix,raml.parser - 1.0.8,digitalunited/wp-elastic-api - v0.1.2,computerundsound/curserver - 2.2.0,restler/framework - 4.0.0,ramzyvirani/laravel-boilerplate - dev-snyk-fix-6118335e7ee4db4dc6929725f8b9be70,treolabs/treocore - 3.25.15-rc6,smartadmin.ui - no_fix,toml - 0.1.27,exceptionless.app - no_fix,pragmaticlinux/ember - no_fix,magento/community-edition - 2.2.0-RC1.1,treolabs/treocore - 1.0.0,dhawton/l5-swagger-redoc - 3.0.1,dandisy/laravel-generator - 1.2.7,gbksoft/yii2-swagger - v1.0.1,superup/mobwebbundle - no_fix,components/handlebars.js - v4.0.13,tiderjian/think-core - v11.13.6,nowyouwerkn/wecommerce - dev-moon,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/ssri-6.0.2,treo/treopim - foo,logiks/logiks-core - no_fix,damian-nz/l5-swagger - 4.0.0,luracast/restler - dev-features/proxy-api,librenms/librenms - 22.4.x-dev,poqcz/restler - dev-master,arionum/node - v0.1a,zaoub/zaoub - dev-dependabot/npm_and_yarn/lodash-4.17.19,c21.core.app.service - no_fix,kamaelkz/yii2-admin-panel - no_fix,dunglas/todomvc-bundle - no_fix,codesleeve/l4-asset-handlebars - no_fix,luracast/restler - 5.07,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/ajv-6.12.6,kbrabrand/silex-swagger-ui - no_fix,gzero/api - v0.0.1,evocms/evolution - dev-fix/codemirror-remove-addon-tern,dingdayu/qiniupan - no_fix,folksyfolks/l5-swagger - 2.1,handlebars.js - 4.0.0,tribalsystems/zenario - 8.3.47997,dreamfactory/dreamfactory - 2.1.0,treo/treopim - 3.25.15-rc10,xtwoend/minion-cms - no_fix,tribalsystems/zenario - 8.1.45530,mpcmf/mpcmf-web-app - no_fix,clubmaster/formextra - 1.0,handlebars - 4.1.2-0,emberjs - 2.2.0,frameworks/handlebars.js - no_fix,flask-apispec - 0.7.0,kevupton/auto-swagger-ui - v0.1.0,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/bulma-1.0.3,riverslei/laravel-swagger - no_fix,antwebes/api-social-bundle - no_fix,envrin/apex - 1.0.1,digitalunited/wp-elastic-api - v0.1.3,servicestack.api.swagger.signed - 4.5.12,hadeswang/jlapp-swaggervel - 2.0.x-dev,imjarek/laravel-swagger - 5.0,dreamfactory/df-api-docs-ui - 1.1.0,cr3a7ure/core - no_fix,tiderjian/think-core - v11.33.4,treo/treopim - 3.25.3-rc1,treolabs/treocore - 3.25.15-rc10,dreadnaught/laramie - dev-dependabot/composer/guzzlehttp/psr7-1.8.5,quantimodo/docs - dev-renovate/npm-path-parse-vulnerability,logiks/logiks-core - v4.0.0,contentasaurus/c-rex-admin - v1.0.7	❌
CVE-2015-8861	Medium	6.1	handlebars-2.0.0.min.js	Direct	4.0.0	❌
WS-2019-0103	Medium	5.6	handlebars-2.0.0.min.js	Direct	4.1.0,dreamfactory/df-swagger-ui - 0.4.0,brt/blog-bundle - 0.8.3.2,dhawton/l5-swagger-redoc - 4.0.1,logiks/logiks-core - no_fix,osidea/eosadm - no_fix,treolabs/treocore - 3.25.18-rc2,ernestoponce/slimproject - no_fix,dandisy/adminlte-templates - 1.2.2,sada/sadata-component - no_fix,frameworks/handlebars.js - 1.2.0,davin.bao/apidoc - no_fix,raml.parser - 1.0.7,tiderjian/think-core - v2.3.5,librenms/librenms - dev-dependabot/npm_and_yarn/axios-1.7.4,yangsuda/slimcms-public - no_fix,evolutioncms/evolution - 1.4.1,tiderjian/think-core - v7.2.0,tasmaniski/zend-swagger - no_fix,efwplusruntime - no_fix,dvixi/yii2-alpaca-json - no_fix,dolibarr/dolibarr - dev-revert-15607-12edit-extrafield-computed-multiline,jessekoska/swagger-lume - v2.0.24,perfectpanel/swaggergen - no_fix,dolibarr/dolibarr - 12.1.x-dev,driberac/blank - no_fix,jacoob/vino-blog - no_fix,dennis1804/iq-swagger - no_fix,treolabs/treocore - 3.25.0-rc20,bseries/base_core - v1.3.0,pronto/mobilebundle - 0.2.2,gbksoft/yii2-swagger - v1.0.3,evolutioncms/evolution - 3.1.10,flask-apispec - 0.7.0,evolutioncms/evolution - 1.4.17,digitalunited/wp-elastic-api - v0.1.2,shopxo/shopxo - v2.2.7,dunglas/api-bundle - dev-sf-dev-2,pronto/mobilebundle - 0.1.0,adaclare/server-manager - no_fix,yanev/laraadmin - no_fix,components/handlebars.js - v3.0.4,tiderjian/think-core - v13.0.0,jinsoft/laravel-swagger - no_fix,pwptemplatepusintek - no_fix,pods-framework/pods - dev-dependabot/npm_and_yarn/multi-cf87d80143,yangsuda/slimcms - 2.0.1.x-dev,wheelpros/fitment-platform-api - 2.2.x-dev,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/ajv-6.12.6,kevupton/auto-swagger-ui - v0.1.0,mreko/l5-swagger - 3.0.1,subbly/backend - no_fix,shopxo/shopxo - 2.1.0,gbksoft/yii2-swagger - v1.0.2,quantimodo/docs - dev-renovate/npm-path-parse-vulnerability,rtablada/laravel-faq - 1.0.x-dev,flex360/pilot - dev-dependabot/npm_and_yarn/dns-packet-1.3.4,vanderlee/swaggergen - 2.0.1,treolabs/treocore - 3.25.1-rc24,20steps/bricks-rest-core - v2.0.0,sfs/admin-bundle - dev-feature/sf5,damian-nz/l5-swagger - dev-master,gzero/api - v1.0.0,digitalunited/wp-elastic-api - v0.1.3,kbrabrand/zf2-swagger-ui - no_fix,damian-nz/l5-swagger - no_fix,za-web/octo-gallery - no_fix,digitalunited/wp-elastic-api - v0.1,luracast/restler - 5.07,magento/community-edition - 2.2.x-dev,zulfajuniadi/php-rest-server - no_fix,wheelpros/fitment-platform-api - 0.42.0-beta9,eglober.ics.theme - no_fix,kubotak-is/l5-swagger - 4.0.1,cr3a7ure/core - no_fix,siu-toba/framework - dev-feature/updateLibs,andriybazyuta/l4-asset-emblem - no_fix,vjeantet/silex-simple-rest-swagger - no_fix,librenms/librenms - dev-CiscoNac,librenms/librenms - 201507,evocms/evolution - dev-fix/3x-refactor,imjarek/laravel-swagger - 5.0,poqcz/restler - 4.0.0,opencontent/ocopendata_forms-ls - 1.5.2,svgsynoptic2 - 4.1.4,treo/treopim - 3.25.15-rc8,evocms/evolution - dev-Issue24,firdaushatta/l5-swagger - dev-upgrade-to-swagger-ui-4,phprest/phprest-sample-heroku-app - no_fix,treo/treopim - 3.25.5-rc3,bseries/base_core - v1.0.0,auspice - no_fix,handlebars - 100.0.0,zfcampus/zf-apigility-documentation-swagger - no_fix,allmobilize/amazeui - v1.0.0,sjje/swaggervel - 2.0.x-dev,seax_scheme - no_fix,folksyfolks/l5-swagger - 3.1.4,gbksoft/yii2-swagger - v1.0.1,evocms/evolution - 3.1.20,fxmonster/l5-swagger - 5.0,folksyfolks/l5-swagger - 2.1,pods-framework/pods - 2.7.2,tiderjian/think-core - v8.0.4,brt/blog-bundle - no_fix,siu-toba/framework - dev-support/v3.3,dreadnaught/laramie - dev-feature/bulk-hook-refactor,20steps/bricks-rest-core - v1.0.0-beta,tadpole - no_fix,xjryanse/admin - v0.0.1,tiderjian/qscmf - dev-rebuild1,logiks/logiks-core - v4.0.0,tuupke/laravel-swagger - 2.0.0,tiderjian/think-core - v12.0.0,dreadnaught/laramie - dev-dependabot/composer/guzzlehttp/psr7-1.8.5,speedovation/laravelmart - 0.2,restler/framework - 3.0.0-RC1,treolabs/treocore - 3.23.0,wheelpros/image-generator-plus - 2.2.x-dev,evolutioncms/evolution - 3.1.8,laminas-api-tools/api-tools-documentation-swagger - 1.3.x-dev,ncapsulate.bower - no_fix,digitalunited/wp-elastic-api - v0.1.4,flask-restful-swagger - no_fix,treo/treopim - 3.24.0,emberjs - 1.3.0,tractorcow/web-console - v0.9.5,pods-framework/pods - dev-dependabot/npm_and_yarn/node-fetch-2.6.7,contentasaurus/c-rex-admin - v1.0.7,helingfeng/l5-swagger - 5.0,g3n1us/editor - no_fix,mpcmf/mpcmf-web-app - no_fix,dreamfactory/dreamfactory - 2.1.0,opine/layout - v2.0.1,wheelpros/shipping-method-calculator - 0.42.0-beta10,dersam/carty - no_fix,tasmaniski/laminas-swagger - no_fix,treolabs/treocore - 3.25.3,dunglas/json-ld-api-bundle - dev-sf-dev-2,vsmoraes/swagger-ui-bundle - v0.1.2,shopxo/shopxo - v2.2.8.x-dev,ralphowino/swagger - no_fix,envrin/apex - 1.0.1,dandisy/webcore-base - 1.0.0,dingdayu/qiniupan - no_fix,librenms/librenms - 22.4.x-dev,tribalsystems/zenario - 7.6.41504,pods-framework/pods - dev-feature/2.8/WPML,wheelpros/fitment-platform-api - 0.42.0-beta10,pleio/pleio_rest - no_fix,dhawton/l5-swagger-redoc - v2.0,isobar-nz/web-console - 2.1.1,librenms/librenms - dev-dependabot/composer/composer/composer-2.1.9,clubmaster/formextra - 1.0,rutatiina/ui - no_fix,bmilesp/bootstrap_extend - 2.1.x-dev,riverslei/laravel-swagger - no_fix,treolabs/treocore - 3.25.15-rc8,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/bulma-1.0.3,tribalsystems/zenario - 8.5.51340,frameworks/handlebars.js - no_fix,tribalsystems/zenario - 8.1.45530,tiderjian/think-core - v11.13.6,treolabs/treocore - 3.25.17-rc5,plagtracker/api-client - no_fix,imikemiller/l5-swagger-redoc - 4.0.1,treolabs/treocore - 3.24.27-rc5,zquintana/lara-swag - no_fix,tribalsystems/zenario - 8.3.47997,emberjs - 1.0.0,tra.eservices.formbuilder - no_fix,gbksoft/yii2-swagger - v1.0.4,components/handlebars.js - dev-jaylinski-patch-1,evolutioncms/evolution - 1.4.15,codesleeve/sprockets - no_fix,raftx24/l5-swagger - 3.0.1,evolution-cms-extras/doclister - no_fix,dandisy/webcore-base - no_fix,evocms/evolution - dev-fix/evo-3x-184,tribalsystems/zenario - 42085,dhawton/l5-swagger-redoc - 3.0.1,dolibarr/dolibarr - dev-revert-19608-patch-2,treolabs/treocore - 3.25.2-rc3,treo/treopim - 3.24.29-rc3,iramgutierrez/laravel-resource-api - 1.0.27,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/tributejs-5.1.3,pyntax/pyntax - 0.9.2,evocms/evolution - 2.0.0-RC,moxie - 1.0.4,treolabs/treocore - 3.25.12-rc4,devisephp/cms - v.2.1.0-beta.4,wheelpros/shipping-method-calculator - 2.2.x-dev,latrell/swagger - 1.0.2,isobar-nz/web-console - 2.0.2,dreamfactory/dreamfactory - dev-dependabot/add-v2-config-file,treolabs/treocore - 3.24.29-rc3,flask-apispec - 0.4.0,xjryanse/admin - v0.0.145,kubotak-is/l5-swagger - 3.0.1,imikemiller/l5-swagger-redoc - v2.0,api-platform/core - v2.1.0-beta.1,zfcampus/zf-apigility-documentation-swagger - 0.9.0,neelbhanushali/laravel-apidocjs - no_fix,pragmaticlinux/ember - no_fix,esnanta/yii2-news - dev-update-news,myvisasnodejs - no_fix,iramgutierrez/lumen-resource-api - no_fix,seax_util - 0.1.2,envrin/apex - 1.2.2,magento/community-edition - dev-lenaorobei-patch-2,dolibarr/dolibarr - dev-scrutinizer-patch-2,sergeyfast/eazy-jsonrpc - no_fix,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/postcss-7.0.36,smskin/l5-swagger - 5.0,thinkerforthink/thinker - v1.0.0,bseries/base_core - v1.5.0,flask-apispec - 0.4.0,opine/layout - v2.0.2,poqcz/restler - 2.2.0,kennersoft/kennercore - 3.25.35,pmurkin/bootstrapi - no_fix,keeko/developer-app - v0.2,cal127/phpcrud - v0.1,tiderjian/qscmf - v2.0.0,steamuloabeaujou/api-platform - v2.1.0-beta.1,seax_svm - 0.2.8,evocms/evolution - dev-shit-and-sticks,brt/blog-bundle - 0.8.0,svgsynoptic2 - 4.1.4,darkaonline/l5-swagger - dev-upgrade-to-swagger-ui-4,smarttheme.ui - no_fix,danijelsingulatiry98/swaggergen - no_fix,juzaweb/l5-swagger - 5.0,msbios/cpanel - v1.0.48,dunglas/api-bundle - v2.0.9,tiderjian/think-core - v11.34.0,appserver-io/appserver - 1.1.32,luracast/restler - 4.0.0,xjryanse/admin - v0.1.15,tiderjian/think-core - v8.0.1,treo/treopim - 3.25.1-rc24,bluzphp/skeleton - 1.0.1,evocms/evolution - dev-fix/codemirror-remove-addon-tern,brt/blog-bundle - 0.8.1,tariqul/multiauth - no_fix,bnsights.mvc2 - 1.2.1.93,raftx24/l5-swagger - 4.0.1,hos/hos-framework - no_fix,esnanta/yii2-news - no_fix,bokeh - 0.9.0,ant-ipc-server - no_fix,computerundsound/curserver - 2.2.0,librenms/librenms - 1.38-full,emberjspackage - no_fix,evocms/evolution - dev-frozen_urls,evolutioncms/evolution - 1.3.0,kizi/easyminer-easyminercenter - v2.0,gajendrajain20/laravel-pioneer-cms - no_fix,tiderjian/think-core - v11.19.10,gzero/api - v0.0.1,lanos/yetiweb - no_fix,siu-toba/framework - dev-feature/formatoFechaConGuion,secp256k1 - 0.6.0,restler/framework - 5.07,wheelpros/image-generator-plus - 0.42.0-beta10,pharmit/swaggervel - 2.0.x-dev,tiderjian/think-core - v11.13.4,speedovation/laravelmart - no_fix,tiderjian/think-core - v11.x-dev,firdaushatta/l5-swagger - dev-firdaushatta-patch-2,tribalsystems/zenario - 8.2.46436,o2relax/laravel-shop - no_fix,components/handlebars.js - v4.0.13,darkaonline/l5-swagger - 3.0.1,magento/community-edition - dev-converted-magento-magento2-2.4.3,kphcdr/ppphp - 2.3.0,flex360/pilot - no_fix,luracast/restler - 2.2.0,bokeh - 0.9.0,librenms/librenms - dev-refactor-discovery,dandisy/laravel-generator - 1.0.0,quantimodo/docs - dev-renovate/npm-glob-parent-vulnerability,tiderjian/think-core - v11.30.4,opencontent/ocwebhookserver-ls - 1.1.4,jessekoska/swagger-ui-lumen - no_fix,yiixwom/yii-xwom - v0.1.2,dennis1804/iq-swagger - dev-dependabot/composer/illuminate/support-approx-8.16,evocms/evolution - dev-users,treo/treopim - 3.25.19-rc3,cr3a7ure/core - dev-docminor,karmanodemodules - no_fix,dynamic/silverstripe-locator - 1.1.1,tiderjian/think-core - v12.0.8,codesleeve/l4-asset-handlebars - no_fix,wheelpros/shipping-method-calculator - 0.42.0-beta9,treolabs/treocore - 3.24.32,components/handlebars.js - v3.0.8,treolabs/treocore - 3.25.19-rc3,alt3/cakephp-swagger - no_fix,imikemiller/l5-swagger-redoc - 3.0.1,tiderjian/think-core - v11.13.10,treolabs/treocore - 3.25.15-rc10,vanthao03596/fortify-limitless - 1.0.2,mpcmf/mpcmf-web-app - 1.0.0.x-dev,treolabs/treocore - 1.0.0,tribalsystems/zenario - 7.0.2e,treolabs/treocore - 3.25.15-rc3,treo/treopim - 3.24.32,tribalsystems/zenario - 9.1.55143,opine/layout - v2.0.6,kennersoft/kennercore - 3.25.37,kbrabrand/silex-swagger-ui - no_fix,sfs/admin-bundle - 1.0.0,smartadmin.ui - no_fix,nehakadam/calenstyle - no_fix,opine/layout - v2.0.7,shopxo/shopxo - v2.2.1,raftx24/l5-swagger - v2.0,antonio-salieri/egctweet_plain - no_fix,flask-apispec - 0.7.0,rich2k/l5-swagger - 5.0,tiderjian/think-core - v11.34.3,odn.swagger.net - no_fix,davigs/swagger-lume - 2.0,centurion/app - no_fix,siu-toba/framework - v3.3.6,acosf/archersys - 1.0,eyecatchup/restler - 0.3.0,dynamic/silverstripe-locator - 1.2.1,ea/yii2-contact-manager - no_fix,evocms/evolution - 1.4.2,opencontent/ocwebhookserver-ls - no_fix,librenms/librenms - dev-ottorei-patch-1,govtnz/swagger-ui - v1.0,apex/apex - 1.5.0,mediabet-kamaelkz/yii2-admin-panel - no_fix,appserver-io/appserver - no_fix,folksyfolks/l5-swagger - dev-upgrade-to-swagger-ui-4,tiderjian/think-core - v3.1.2,kartik-v/yii2-widget-typeahead - no_fix,haotx/swagger-lume - no_fix,servicestack.api.swagger - 4.5.12,opencontent/ocwebhookserver-ls - 1.0.0,handlebars - 4.0.13,adrexia/silverstripe-pure - no_fix,is-iot-ipc-server - no_fix,firdaushatta/l5-swagger - dev-firdaushatta-patch-1,kennersoft/kennercore - dev-documentation-v1,treo/treopim - 3.25.2-rc3,pods-framework/pods - dev-feature/4098-wpmu-queries,treo/treopim - 3.25.0-rc20,librenms/librenms - dev-dependabot/npm_and_yarn/follow-redirects-1.14.8,apex/apex - 1.2.16,hadeswang/jlapp-swaggervel - 2.0.x-dev,magento/community-edition - 0.42.0-beta10,connexion - 2.3.0,seldatdirect/swagger-lume - no_fix,tribalsystems/zenario - 7.5.40440,bmilesp/bootstrap_extend - no_fix,treo/treopim - 3.23.0,squareproton/bond - no_fix,tiderjian/think-core - dev-dependabot/npm_and_yarn/asset/libs/label-select/ssri-6.0.2,msbios/cpanel - no_fix,shopxo/shopxo - v2.2.5.x-dev,dreadnaught/laramie - dev-main,elefant/app-products - 1.0.0,pyntax/pyntax - dev-develop/pyntax-api-module,opencontent/ocopendata_forms-ls - no_fix,jjdoor/swagger-lume - 2.0,tiderjian/think-core - v12.0.5,treolabs/treocore - 3.25.15-rc6,dreamfactory/df-swagger-ui - v3.0.0,superius/omnihubfonts - no_fix,xtwoend/minion-cms - no_fix,magento/community-edition - 2.2.0-RC1.1,egov/vws - no_fix,shopxo/shopxo - v2.0.3,woldy/cms - no_fix,kamaelkz/yii2-admin-panel - no_fix,midiator.webclient - 1.0.105,yaangvu/swagger-lume - 2.0,subbly/cms - dev-packaging,restler/framework - dev-master,darkaonline/l5-swagger - v2.0,dunglas/api-bundle - v2.0.0-rc.5,cromwell - 0.30,computerundsound/curserver - no_fix,xjryanse/admin - v0.0.148,mmitasch/flow4ember - no_fix,luracast/restler - dev-features/proxy-api,antonio-salieri/egc_tweet - no_fix,dandisy/laravel-generator - 1.2.7,dolibarr/dolibarr - dev-scrutinizer-patch-4,treo/treopim - 3.24.27-rc5,evocms/evolution - 3.1.1,yiixwom/yii-xwom - 1.0.6,mymdz/l5-swagger - 5.0,dandisy/laravel-generator - dev-dependabot/npm_and_yarn/templates/vuejs/js/eslint-4.19.1,appserver-io/appserver - 1.1.1-alpha1,mahmoodbabaei/etribes-code-challenge - no_fix,treo/treopim - 3.25.18-rc2,isobar-nz/web-console - 2.0.x-dev,ramzyvirani/laravel-boilerplate - dev-snyk-fix-6118335e7ee4db4dc6929725f8b9be70,dreadnaught/laramie - dev-dependabot/npm_and_yarn/src/bulma-1.0.2,hasangilak/l5-swagger - 5.0,treo/treopim - 3.25.17-rc5,openi-ict/api-builder - no_fix,gbksoft/yii2-swagger - v1.1.0,cr3a7ure/core - dev-class,restler/framework - 4.0.0,treo/treopim - 3.25.1-rc30,gbksoft/yii2-swagger - v1.0.0,handlebars.js - 4.1.0,damian-nz/l5-swagger - 4.0.0,guitarpoet/clips-tool - dev-picture,appserver-io/appserver - 1.1.27,flask-restful-swagger - no_fix,parm/parm-web - no_fix,kphcdr/ppphp - 1.0,frameworks/handlebars.js - 1.1.0,luracast/restler - 5.0.6,poqcz/restler - dev-master,tribalsystems/zenario - 7.7.42682,tiderjian/think-core - v11.33.4,swagger-api/swagger-ui - dev-dependabot/github_actions/master/dependabot/fetch-metadata-2.0.0,pods-framework/pods - dev-feature/numbers-support-leading-zeroes,librenms/librenms - dev-vlan-discovery-only,smellems/wet4 - dev-master,treo/treopim - 3.25.3-rc1,ng-grid - 2.0.4,shopxo/shopxo - no_fix,jsdom - 11.11.0,tribalsystems/zenario - 8.0.44237,kubotak-is/l5-swagger - v2.0,osfed/l4crud - no_fix,tiderjian/think-core - v11.34.7,treolabs/treocore - 3.25.8,visiosoft/l5-swagger - 3.x-dev,dreamfactory/app-admin - 1.0.4,dunglas/todomvc-bundle - no_fix,esandri/swagger-ui-big - dev-cbt-run-e2e,evolutioncms/evolution - 3.1.6,contentasaurus/c-rex-admin - v1.0.1,arionum/node - v0.1a,pods-framework/pods - dev-test/skc-testing-3,treo/treopim - foo,dreamfactory/df-api-docs-ui - 1.1.0,treo/treopim - 3.25.15-rc3,siu-toba/framework - dev-feature/addIdFuenteUsuarios,siu-toba/framework - dev-feature/chngRestExceptions,bower - no_fix,superup/mobwebbundle - no_fix,treo/treopim - 3.25.12-rc2,evolutioncms/evolution - no_fix,antwebes/api-social-bundle - no_fix,dreadnaught/laramie - dev-feature/add-way-to-get-underlying-filtered-query-builder,clubmaster/formextra - no_fix,bseries/base_core - no_fix,vsmoraes/swagger-ui-bundle - no_fix,treo/treopim - 3.25.15-rc10,elefant/cms - dev-master,restler/framework - 5.0.6,dunglas/api-bundle - v2.0.5,pods-framework/pods - 2.7,pods-framework/pods - dev-dependabot/npm_and_yarn/async-2.6.4,dandisy/webcore - 1.0.6,msbios/cpanel - v1.0.44,kjda/translation-bundle - no_fix,handlebars - 3.0.8,osidea/eosadm - 0.0.2-beta.1,emberjs - 1.0.5,restaurare/ewlist - no_fix,treo/treopim - 3.25.8-rc1,spescina/mediabrowser - 3.0.0,librenms/librenms - 22.6.0,rutatiina/accountant - no_fix,danijelsingularity98/swaggergen - no_fix,lithiumdev/l5-swagger - v1.0.0,opencontent/ocopendata_forms-ls - 1.6.10,luracast/restler - 1.0.20,frameworks/handlebars.js - 0.1.3,regulus/fractal - v0.4.7,shopxo/shopxo - v2.2.0,jlapp/swaggervel - 2.0.x-dev,enlx/apidoc-template - 0.1.0,treolabs/treocore - 3.25.5-rc3,treo/treopim - 3.20.14,jagermesh/bright - v2.0.22,alexmaramaldo/swaggervel-2 - no_fix,libgraviton/swagger-ui - v1.0,vegas-cmf/media - v1.1.x-dev,keyteqlabs/keymedia-ezpublish - no_fix,rodchyn/api-platform-core - v2.1.0-beta.1,activelamp/swagger-ui-bundle - v0.1.2,librenms/librenms - dev-dependabot/npm_and_yarn/elliptic-6.5.4,opencontent/ocwebhookserver-ls - dev-job-control,opine/layout - v2.0.8,treo/treopim - 3.25.15-rc6,jnbruno/akeed - no_fix,tribalsystems/zenario - 9.0.55141,jym.identityserver.swagger - no_fix,open-resource-manager/core - no_fix,basalam/laravel-kendo-ui - no_fix,swagger-api/swagger-ui - 3.x-dev,treolabs/treocore - 3.24.0,mreko/l5-swagger - v2.0,bseries/base_core - v1.4.0,tribalsystems/zenario - 8.9.55141,tiderjian/think-core - v11.30.0,iwanli/laravel5-swagger - no_fix,evocms/evolution - 1.4.20,magetest/magento - v2.0.1.0,w3yyb/phalphp - no_fix,treo/treopim - 3.24.1,librenms/librenms - dev-php73,emberjs - 2.2.0,wheelpros/image-generator-plus - 2.2.5,treolabs/treocore - 3.24.1,magento/community-edition - 0.42.0-beta9,librenms/librenms - dev-pr12764,mreko/l5-swagger - 4.0.1,wheelpros/shipping-method-calculator - 2.2.5,siu-toba/framework - dev-feature/fixApiKeysByEnv,librenms/librenms - dev-ottorei-chrony-docs,api-platform/core - dev-sf-dev-2,dedegunawan/my-framework - no_fix,dvixi/yii2-alpaca-json - 0.9-dev,handlebars.js - 4.0.0,leaphly/leaphly-sandbox - no_fix,pronto/mobilebundle - 2.0.1-beta1,dwij/laraadmin - 1.0.1,librenms/librenms - dev-analysis-22NN39,fmarmo/swagger-lume - 2.0,quantimodo/docs - dev-renovate/npm-nanoid-vulnerability,wheelpros/fitment-platform-api - 2.2.5,toml - 0.1.27,dreamfactory/df-swagger-ui - no_fix,nhiepphong/backend - no_fix,sjje/swaggervel - dev-master,firdaushatta/l5-swagger - 5.0,yangsuda/slimcms - 2.0.0,dolibarr/dolibarr - 14.0.0,connexion - 2.3.0,servicestack.api.swagger.signed - 4.5.12,pmvc-app/swagger_ui - no_fix,wheelpros/image-generator-plus - 0.42.0-beta9,jnbruno/akeed - 0.0.3,dreamfactory/app-admin - no_fix,librenms/librenms - 201606,ci-blox/ignition-go - 1.0.0-beta.1,insidion/swagger-bundle - 1.0.0	❌
CVE-2021-23383	Medium	5.6	handlebars-2.0.0.min.js	Direct	handlebars - 4.7.7	❌
CVE-2021-23369	Medium	5.6	handlebars-2.0.0.min.js	Direct	com.github.jknack:handlebars:4.2.0, handlebars - 4.7.7	❌

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

Partial details (2 vulnerabilities) are displayed below due to a content size limitation in GitHub. To view information on the remaining vulnerabilities, navigate to the Mend Application.

CVE-2019-19919

Vulnerable Library - handlebars-2.0.0.min.js

Handlebars provides the power necessary to let you build semantic templates effectively with no frustration

Library home page: https://cdnjs.cloudflare.com/ajax/libs/handlebars.js/2.0.0/handlebars.min.js

Path to vulnerable library: /WebContent/swagger/lib/handlebars-2.0.0.js

Dependency Hierarchy:

• ❌ handlebars-2.0.0.min.js (Vulnerable Library)

Found in HEAD commit: 44afb8a089c00949fdc70eebcf863d36c664f269

Found in base branch: AltoroJ-3.2

Vulnerability Details

Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's proto and defineGetter properties, which may allow an attacker to execute arbitrary code through crafted payloads.
Mend Note: The description of this vulnerability differs from MITRE.

Publish Date: 2019-12-20

URL: CVE-2019-19919

CVSS 3 Score Details (9.8)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-w457-6q6x-cgp9

Release Date: 2019-12-20

Fix Resolution: handlebars - 3.0.8,4.3.0

CVE-2019-20920

Vulnerable Library - handlebars-2.0.0.min.js

Handlebars provides the power necessary to let you build semantic templates effectively with no frustration

Library home page: https://cdnjs.cloudflare.com/ajax/libs/handlebars.js/2.0.0/handlebars.min.js

Path to vulnerable library: /WebContent/swagger/lib/handlebars-2.0.0.js

Dependency Hierarchy:

• ❌ handlebars-2.0.0.min.js (Vulnerable Library)

Found in HEAD commit: 44afb8a089c00949fdc70eebcf863d36c664f269

Found in base branch: AltoroJ-3.2

Vulnerability Details

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).

Publish Date: 2020-09-30

URL: CVE-2019-20920

CVSS 3 Score Details (8.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: Low
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.npmjs.com/advisories/1316

Release Date: 2020-09-30

Fix Resolution: handlebars - 4.5.3