1 issue skipped by the security teams:
- CVE-2019-19919: Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/node-handlebars.png){kind=link}