{"api_version":"v1","generated_at":"2026-10-07T18:40:00+00:00","product":{"cve_count":9,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-handlebars-lang-handlebars-js-e32f3df53866","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"handlebars.js","next_cursor":null,"observations":[{"affected":"handlebars.js: >= 4.0.0, < 4.7.10","affected_versions_present":true,"cve_id":"CVE-2026-106446","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106446","fixed":"4.7.10.","last_modified":"2026-10-06T19:41:55.785Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj","primary_source":"","published":"2026-10-06T19:41:55.785Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.10","affected_versions_present":true,"cve_id":"CVE-2026-106445","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106445","fixed":"4.7.10.","last_modified":"2026-10-06T19:39:08.916Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f","primary_source":"","published":"2026-10-06T19:39:08.916Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.10","affected_versions_present":true,"cve_id":"CVE-2026-106444","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106444","fixed":"4.7.10.","last_modified":"2026-10-06T19:48:02.050Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7","primary_source":"","published":"2026-10-06T19:01:14.626Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.9","affected_versions_present":true,"cve_id":"CVE-2026-33941","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33941","fixed":"RHSA-2026:34342: Cluster Observability Operator 1.5.0","last_modified":"2026-09-11T12:09:10.318Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","primary_source":"","published":"2026-03-27T21:13:15.437Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.9","affected_versions_present":true,"cve_id":"CVE-2026-33940","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33940","fixed":"RHSA-2026:34342: Cluster Observability Operator 1.5.0","last_modified":"2026-09-04T12:04:53.335Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","primary_source":"","published":"2026-03-27T21:11:10.719Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.9","affected_versions_present":true,"cve_id":"CVE-2026-33939","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33939","fixed":"RHSA-2026:34342: Cluster Observability Operator 1.5.0","last_modified":"2026-09-04T12:04:44.445Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","primary_source":"","published":"2026-03-27T21:08:24.664Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.9","affected_versions_present":true,"cve_id":"CVE-2026-33938","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33938","fixed":"RHSA-2026:34342: Cluster Observability Operator 1.5.0","last_modified":"2026-09-04T12:04:55.157Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","primary_source":"","published":"2026-03-27T21:05:42.485Z"},{"affected":"handlebars.js: >= 4.0.0, < 4.7.9","affected_versions_present":true,"cve_id":"CVE-2026-33937","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33937","fixed":"RHSA-2026:34342: Cluster Observability Operator 1.5.0","last_modified":"2026-09-04T12:04:45.273Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","primary_source":"","published":"2026-03-27T21:03:46.748Z"},{"affected":">= 4.0.0, < 4.7.9","affected_versions_present":true,"cve_id":"CVE-2026-33916","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33916","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-30T15:41:36.977Z","patch_url":"https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2","primary_source":"","published":"2026-03-27T21:00:48.624Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"handlebars-lang"}}