- Issue created by @kanchamk
opigno_dashboard
uses Handlebars JS 1.3.0 in ng/package-lock.json
which poses security vulnerabilities after scanning with security risk tools. Below is the description raised in the risk tools.
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.
Supported Links: https://www.npmjs.com/advisories/1164
https://www.tenable.com/security/tns-2021-14
Security risk tools reporting the usage of handlebar js prior to 4.3.0, The CVE number CVE-2019-19919
for handlebar JS security vulnerability exposed.
Update handlebar js to its latest version (4.7.8)
Active
3.1
Code