New vulnerability on the NVD: CVE-2019-20922

0

0

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.

Published at: September 30, 2020 at 02:15PM
View on website

John Jason Fallows

See author's posts