Hbs vulnerabilities
We track 1 vulnerability in Hbs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Hbs vulnerabilities
- 8.1 High severity
hbs: Improper Neutralization of Input During Web Page Generation
hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placehold