Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

CVE-2019-19919: Update Handlebars to 4.5.3

Description

The handlebars package has the Prototype Pollution vulnerability (CVE-2019-19919).

PMM versions were not affected by this vulnerability, as this package is used as a build dependency only.

Solution: update handlebars to version 4.5.3.

https://github.com/percona/pmm-server/pull/188

NOTE: this must be fixed for pmm1 version only becauthe there is no such page in pmm2

How to test

None

How to document

None

Smart Checklist

Activity

Show:
Done

Details

Assignee

Reporter

Priority

Components

Labels

Needs QA

Yes

Needs Doc

No

Fix versions

Story Points

Sprint

Affects versions

Smart Checklist

Created January 28, 2020 at 8:11 AM
Updated November 13, 2024 at 8:32 AM
Resolved February 20, 2020 at 9:35 PM