:">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <4.7.9","severity":"moderate","title":"Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection","advisoryUrl":"https://github.com/advisories/GHSA-2qvq-rjwj-gvw9","ghsaId":"GHSA-2qvq-rjwj-gvw9","cveId":null,"vulnerableRange":">=4.0.0 <4.7.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.6.0 <=4.7.8","severity":"moderate","title":"Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry","advisoryUrl":"https://github.com/advisories/GHSA-7rx3-28cr-v5wh","ghsaId":"GHSA-7rx3-28cr-v5wh","cveId":null,"vulnerableRange":">=4.6.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"low","title":"Handlebars.js has a Property Access Validation Bypass in container.lookup","advisoryUrl":"https://github.com/advisories/GHSA-442j-39wm-28r2","ghsaId":"GHSA-442j-39wm-28r2","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"high","title":"Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options","advisoryUrl":"https://github.com/advisories/GHSA-xjpj-3mr7-gcpf","ghsaId":"GHSA-xjpj-3mr7-gcpf","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"high","title":"Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial","advisoryUrl":"https://github.com/advisories/GHSA-xhpv-hc6g-r9c6","ghsaId":"GHSA-xhpv-hc6g-r9c6","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"high","title":"Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation","advisoryUrl":"https://github.com/advisories/GHSA-9cx6-37pm-9jff","ghsaId":"GHSA-9cx6-37pm-9jff","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"lodash","packageVersion":">=4.0.0 <=4.17.22","severity":"moderate","title":"Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions","advisoryUrl":"https://github.com/advisories/GHSA-xxjr-mmjv-4gpg","ghsaId":"GHSA-xxjr-mmjv-4gpg","cveId":null,"vulnerableRange":">=4.0.0 <=4.17.22","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"lodash","packageVersion":">=4.0.0 <=4.17.23","severity":"high","title":"lodash vulnerable to Code Injection via `_.template` imports key names","advisoryUrl":"https://github.com/advisories/GHSA-r5fr-rjxr-66jc","ghsaId":"GHSA-r5fr-rjxr-66jc","cveId":null,"vulnerableRange":">=4.0.0 <=4.17.23","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"lodash","packageVersion":"<=4.17.23","severity":"moderate","title":"lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`","advisoryUrl":"https://github.com/advisories/GHSA-f23m-r3pf-42rh","ghsaId":"GHSA-f23m-r3pf-42rh","cveId":null,"vulnerableRange":"<=4.17.23","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title

Advanced URI