New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fabricate templates to crash servers by consuming a lot of memory #1631

Closed

nknapp opened this issue Jan 1, 2020 · 0 comments

Collaborator

nknapp commented Jan 1, 2020 •

edited

Loading

In versions prior to 4.6.0 it was possible to fabricate templates that would crash a node.js server running handlebars.

Details have been disclosed (last year) at https://hackerone.com/reports/726364

nknapp mentioned this issue

feat: access control to prototype properties via whitelist #1633

Merged

nknapp closed this as completed

nknapp changed the title ~~Placeholder~~ Fabricate templates to crash servers by consuming a lot of memory

This issue was closed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment