Jknack vulnerabilities
We track 3 vulnerabilities in Jknack products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
Latest Jknack vulnerabilities
- 7.5 High severity
handlebars.java: Path Traversal: '../filedir'
Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler
- 7.5 High severity
handlebars.java: Improper Limitation of a Pathname to a Restricted Directory
Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handlebars.springmvc.SpringTemplateLoader resolves attacker-influenced Spring MVC view names through Spring ResourceLoader without the path-contain
- 7.5 High severity
handlebars.java: Improper Limitation of a Pathname to a Restricted Directory
Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile() using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing a