th":null},{"packageName":"handlebars","packageVersion":">=4.6.0 <=4.7.8","severity":"moderate","title":"Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry","advisoryUrl":"https://github.com/advisories/GHSA-7rx3-28cr-v5wh","ghsaId":"GHSA-7rx3-28cr-v5wh","cveId":null,"vulnerableRange":">=4.6.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"low","title":"Handlebars.js has a Property Access Validation Bypass in container.lookup","advisoryUrl":"https://github.com/advisories/GHSA-442j-39wm-28r2","ghsaId":"GHSA-442j-39wm-28r2","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"high","title":"Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options","advisoryUrl":"https://github.com/advisories/GHSA-xjpj-3mr7-gcpf","ghsaId":"GHSA-xjpj-3mr7-gcpf","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"high","title":"Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial","advisoryUrl":"https://github.com/advisories/GHSA-xhpv-hc6g-r9c6","ghsaId":"GHSA-xhpv-hc6g-r9c6","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"handlebars","packageVersion":">=4.0.0 <=4.7.8","severity":"high","title":"Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation","advisoryUrl":"https://github.com/advisories/GHSA-9cx6-37pm-9jff","ghsaId":"GHSA-9cx6-37pm-9jff","cveId":null,"vulnerableRange":">=4.0.0 <=4.7.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"immutable","packageVersion":">=5.0.0 <5.1.5","severity":"high","title":"Immutable is vulnerable to Prototype Pollution","advisoryUrl":"https://github.com/advisories/GHSA-wf6x-7x77-mvgw","ghsaId":"GHSA-wf6x-7x77-mvgw","cveId":null,"vulnerableRange":">=5.0.0 <5.1.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":">=10.0.0 <10.2.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","advisoryUrl":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","ghsaId":"GHSA-7r86-cg39-jmmj","cveId":null,"vulnerableRange":">=10.0.0 <10.2.3","fixAvailable":"29.1.2","source":"npm-audit","isDirect":false,"path":"glob > minimatch, test-exclude > minimatch"},{"packageName":"minimatch","packageVersion":">=10.0.0 <10.2.3","severity":"high","title":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions","advisoryUrl":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","ghsaId":"GHSA-23c5-xmqv-rm74","cveId":null,"vulnerableRange":">=10.0.0 <10.2.3","fixAvailable":"29.1.2","source":"npm-audit","isDirect":false,"path":"glob > minimatch, test-exclude > minimatch"},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":">=4.0.0 <4.0.4","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":">=4.0.0 <4.0.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2"

Snippetor