CVE-2026-55760

描述

### Impact Any application that passes user-controlled input to Handlebars.compile() using a FileTemplateLoader (or ClassPathTemplateLoader) is vulnerable to arbitrary file read. This is a realistic attack surface for web applications that use template names from URL path parameters, request parameters, or other user-controlled sources. ### Patches com.github.jknack:handlebars:4.5.2 ### Workarounds Validate template name is derived from user input. ```java if (!file.getPath().startsWith(new File(prefix).getCanonicalPath())) { throw new IOException("Path traversal attempt detected: " + location); } ```

如何修補 CVE-2026-55760

要修補 CVE-2026-55760,請將受影響套件升級到下列已修補版本。

• —升級至 4.5.2 或更新版本

CVE-2026-55760 正在被利用嗎?

目前沒有被利用訊號。CVE-2026-55760 既不在 CISA KEV 也沒有最新的 EPSS 分數。

受影響套件(1)

• from 0, < 4.5.2

CVSS 分數

參考連結(2)

• PATCHgithub.com/jknack/handlebars.java
• WEBgithub.com/jknack/handlebars.java/security/advisories/GHSA-r4gv-qr8j-p3pg