Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Prototype Pollution vulnerability (CVE-2019-19919) in handlebars

Description

The handlebars package has the Prototype Pollution vulnerability (CVE-2019-19919).

PMM versions were not affected by this vulnerability, as this package is used as a build dependency only.

Solution: update handlebars to version 4.5.3.

https://github.com/percona/qan-app/pull/354

How to test

None

How to document

None

Smart Checklist

Activity

Done

Details

Assignee

Reporter

Priority

Components

Labels

Needs Doc

Yes

Fix versions

Story Points

Sprint

Affects versions

Smart Checklist

Created December 26, 2019 at 10:53 PM
Updated November 13, 2024 at 8:34 AM
Resolved January 23, 2020 at 3:48 PM