{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5f7717ba-fe44-50f4-b9c5-cd2d7c7d4ad4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/handlebars@3.0.3-tuxcare.4", "type": "library", "name": "handlebars", "version": "3.0.3-tuxcare.4", "purl": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2c8fdbd4-08c2-5b1a-b623-a44ea930f473", "id": "CVE-2015-8861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2015-8861 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:640e5351-e30c-5c4d-943b-7b1a1ed14c0c", "id": "CVE-2019-19919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-19919 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:52cbc435-6e1e-5874-b7a6-44d3b71d5588", "id": "CVE-2019-20920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-20920 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2e22d236-3102-5971-839c-b184b12eb0cd", "id": "CVE-2021-23369", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23369 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fcb9caa2-4a62-5ab3-9705-ae8c3f65a68c", "id": "CVE-2021-23383", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23383 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:274333d0-ffa5-549f-b282-5ae6449119b9", "id": "CVE-2022-21704", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-21704 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f39cfaa-78c7-5e70-a8fc-85a58d67263f", "id": "CVE-2024-45801", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45801 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c3355e60-6942-592c-938e-5b27d4399011", "id": "CVE-2024-47875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47875 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd27f91f-9c5e-565e-bf34-db04deffe24a", "id": "CVE-2025-26791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1fb0f7b9-b594-553e-b1c4-68ef73e0d83f", "id": "CVE-2025-32996", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32996 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9ee8d14c-1f54-54aa-ba68-cb45f7f39bc3", "id": "CVE-2025-32997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32997 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40d855ad-1dce-5c71-800a-92014066b225", "id": "CVE-2026-0540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5823ba92-d65a-52f1-b0a6-dbfecb8bce04", "id": "CVE-2026-13676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-13676 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f2173e34-0625-5a62-8d16-be152d8393cb", "id": "CVE-2026-16221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-16221 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9dadd6ec-7d1e-5337-846b-fb94c6d6b912", "id": "CVE-2026-33937", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33937 affects version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e5de99e2-394f-5f71-a78d-affc490f0c9e", "id": "CVE-2026-33938", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-33938 does not affect version 3.0.3-tuxcare.4 of handlebars. Version 3.0.3 is not vulnerable. Summary: The target repository (Handlebars 3.0.3) is not vulnerable to CVE-2026-33938. The vulnerability affects versions 4.0.0 through 4.7.8, and the target is running an older version (3.0.3) that predates the vulnerable @partial-block feature. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2bee9c81-e1c8-5c42-9aea-946b451fc87e", "id": "CVE-2026-33939", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-33939 does not affect version 3.0.3-tuxcare.4 of handlebars. Version 3.0.3 is not vulnerable. Summary: Target repository runs Handlebars version 3.0.3, which predates the vulnerable versions (4.0.0 through 4.7.8). The decorator feature that contains the vulnerability does not exist in this version. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b84939d3-4f72-5ca8-88a6-ea2264a4ba14", "id": "CVE-2026-33940", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33940 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:75832559-b306-5055-8b42-5ac64e247621", "id": "CVE-2026-33941", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33941 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:181bb90a-7fc1-58a8-a94f-ac7c89a620a7", "id": "CVE-2026-41238", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4fb70a38-6176-5b45-926f-c5c2fe5be446", "id": "CVE-2026-41239", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0fd9e88e-f2da-52e2-9f70-43fc6e1a2c64", "id": "CVE-2026-41240", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:619f2a68-0991-57aa-97f2-c4f88bfd2455", "id": "CVE-2026-49458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e6ca481a-efc8-5fdc-b114-f41ed1ea55af", "id": "CVE-2026-49459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00e4a14c-cb2d-551d-9de5-6882dc8dd519", "id": "CVE-2026-49978", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e185f015-2a2c-5895-8204-2ef792153e96", "id": "CVE-2026-55602", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55602 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f549580-f27d-5600-909f-c03f4e4f97b0", "id": "CVE-2026-6321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6321 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:48102df4-b3d4-5d80-ae2b-ea4b73eca5e7", "id": "CVE-2026-6322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6322 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:297d4a71-a65c-525a-9895-26cb125e225b", "id": "CVE-2026-65898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a695f31f-ce24-5693-b87a-d8da33070016", "id": "CVE-2026-65899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:918be6d2-ef12-5d58-adb0-b066c14e8101", "id": "CVE-2026-65902", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d032f36f-87a0-58fa-8980-257aa9289cab", "id": "CVE-2026-65912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d3b32582-e6cf-5fa8-8393-c874a311841d", "id": "CVE-2026-65913", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e3342f6a-ba08-5584-a8fb-963ea3c6a628", "id": "CVE-2026-65914", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7d458af5-2fa9-5403-afc9-7eabb84391c1", "id": "CVE-2026-66010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:637204ae-60b5-5976-9d0f-22b618738cc5", "id": "GHSA-2cf5-4w76-r9qv", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2cf5-4w76-r9qv is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e15544e3-5151-59e9-b4c4-d57b33b316ed", "id": "GHSA-39q2-94rc-95cp", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-39q2-94rc-95cp is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:28d2e1c9-b98a-5c0a-9a71-7835c652967d", "id": "GHSA-442j-39wm-28r2", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-442j-39wm-28r2 does not affect version 3.0.3-tuxcare.4 of handlebars. Version 3.0.3 is not vulnerable. Summary: The target repository does not contain the TOCTOU (Time-of-Check Time-of-Use) vulnerability described in GHSA-442j-39wm-28r2. The target's lookup function does not use the vulnerable pattern where lookupProperty() is called but its result is discarded. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3548073b-97a0-5158-b40f-fdf7db266b04", "id": "GHSA-6r5x-hmgg-7h53", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6r5x-hmgg-7h53 is a false positive for handlebars 3.0.3-tuxcare.4." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:42255416-9596-5bed-b6aa-07f1078654ed", "id": "GHSA-76mc-f452-cxcm", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-76mc-f452-cxcm is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d1955208-53b8-5873-b34e-7efe2d8b84e2", "id": "GHSA-7rx3-28cr-v5wh", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7rx3-28cr-v5wh affects version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ef705b50-040b-52c2-b9f9-45c9bfd60f87", "id": "GHSA-c2j3-45gr-mqc4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-c2j3-45gr-mqc4 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:508a2c1c-5f3a-5c68-ba05-d27a47f72c7c", "id": "GHSA-cj63-jhhr-wcxv", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-cj63-jhhr-wcxv is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c9f6360-4042-5d85-bbe7-2f7488041c1e", "id": "GHSA-cjmm-f4jc-qw8r", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-cjmm-f4jc-qw8r is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:05510639-04c9-59e4-88ff-3d088e9dda11", "id": "GHSA-cmwh-pvxp-8882", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ca54134-8b14-5219-9e85-fdaca60a49bc", "id": "GHSA-fmr4-7g9q-7hc7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fmr4-7g9q-7hc7 is a false positive for handlebars 3.0.3-tuxcare.4." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d3dbc280-0341-5578-8ce6-f31f958b0d78", "id": "GHSA-g9r4-xpmj-mj65", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-g9r4-xpmj-mj65 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8fb8e50b-1ef4-563e-adf3-60ad59227f9a", "id": "GHSA-gvmj-g25r-r7wr", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-gvmj-g25r-r7wr is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b1b5403-d47d-5a62-9f11-23b40317e37a", "id": "GHSA-h8r8-wccr-v5f2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h8r8-wccr-v5f2 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b13bcb4b-96c8-5b24-92e4-345f5a35199e", "id": "GHSA-q2c6-c6pm-g3gh", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q2c6-c6pm-g3gh is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c30483d1-6bd1-546a-a7e8-eacae9c9aed7", "id": "GHSA-q42p-pg8m-cqh6", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q42p-pg8m-cqh6 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3906445e-2711-5b23-9b27-bfbff972d747", "id": "GHSA-vxr8-fq34-vvx9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4c79406e-39d5-5fdb-9d64-6ca8872cf7e8", "id": "GHSA-x4vx-rjvf-j5p4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-x4vx-rjvf-j5p4 is fixed in version 3.0.3-tuxcare.4 of handlebars." }, "affects": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:npm/handlebars@3.0.3-tuxcare.4" } ] }