[Snyk] Upgrade handlebars from 4.2.0 to 4.7.7

[snyk-bot]

Snyk has created this PR to upgrade handlebars from 4.2.0 to 4.7.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 27 versions ahead of your current version.
• The recommended version was released 7 months ago, on 2021-02-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-HANDLEBARS-567742	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Proof of Concept
	Prototype Pollution SNYK-JS-HANDLEBARS-534988	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	No Known Exploit
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-469063	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-1279029	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: handlebars

• 4.7.7 - 2021-02-15
  

  v4.7.7

• 4.7.6 - 2020-04-03
  

  v4.7.6

• 4.7.5 - 2020-04-02
  

  v4.7.5

• 4.7.4 - 2020-04-01
  

  v4.7.4

• 4.7.3 - 2020-02-05
  

  v4.7.3

• 4.7.2 - 2020-01-13
  

  v4.7.2

• 4.7.1 - 2020-01-12
  

  v4.7.1

• 4.7.0 - 2020-01-10
  

  v4.7.0

• 4.6.0 - 2020-01-08
  

  v4.6.0

• 4.5.3 - 2019-11-18
• 4.5.2 - 2019-11-13
• 4.5.1 - 2019-10-29
• 4.5.0 - 2019-10-28
• 4.4.5 - 2019-10-20
• 4.4.4 - 2019-10-20
• 4.4.3 - 2019-10-08
• 4.4.2 - 2019-10-02
• 4.4.1 - 2019-10-02
• 4.4.0 - 2019-09-29
• 4.3.5 - 2019-10-02
• 4.3.4 - 2019-09-28
• 4.3.3 - 2019-09-27
• 4.3.2 - 2019-09-26
• 4.3.1 - 2019-09-24
• 4.3.0 - 2019-09-24
• 4.2.2 - 2019-10-02
• 4.2.1 - 2019-09-20
• 4.2.0 - 2019-09-03

from handlebars GitHub release notes

Commit messages

Package name: handlebars

• a9a8e40 v4.7.7
• e66aed5 Update release notes
• 7d4d170 disable IE in Saucelabs tests
• eb860c0 fix weird error in integration tests
• b6d3de7 fix: check prototype property access in strict-mode ([Fix] Fix typo error of Stack Overflow nodejs/nodejs.org#1736)
• f058970 fix: escape property names in compat mode ([Fix] Fix typo error of Stack Overflow nodejs/nodejs.org#1736)
• 77825f8 refator: In spec tests, use expectTemplate over equals and shouldThrow (Better GitHub issue templates nodejs/nodejs.org#1683)
• 3789a30 chore: start testing on Node.js 12 and 13
• e6ad93e v4.7.6
• 2bf4fc6 Update release notes
• b64202b Update release-notes.md
• c2f1e62 Switch cmd parser to latest minimist
• 08e9a11 Revert "chore: set Node.js compatibility to v6+"
• 1fd2ede v4.7.5
• 3c9c2f5 Update release notes
• 16487a0 chore: downgrade yargs to v14
• 309d2b4 chore: set Node.js compatibility to v6+
• 645ac73 test: fix integration tests
• b454b02 docs: update release-docs in CONTRIBUTING.md
• 7adc19a v4.7.4
• 9dd8d10 Update release notes
• 4671c4b Use tmp directory for files written during tests
• e46baa1 tasks/test-bin.js: Delete duplicate test
• c491b4e Revert "Update release-notes.md"

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs