New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

STRF-6929: Backport fixes to Handlebars 3.x #1

Merged

mattolson merged 2 commits into bigcommerce:3.x from mattolson:backport-rce-fix

Jun 29, 2019

mattolson commented Jun 28, 2019 •

edited

Backport security fixes from 4.1.0 and 4.1.2 to the 3.x branch.

Advisory: https://www.npmjs.com/advisories/755
First fix (released in 4.1.0): handlebars-lang@42841c4
Second fix (released in 4.1.2): handlebars-lang@cd38583

mattolson changed the title ~~STRF-6929: Fix RCE in Handlebars~~ STRF-6929: Fix RCE in Handlebars 3.x

mattolson changed the title ~~STRF-6929: Fix RCE in Handlebars 3.x~~ STRF-6929: Backport fixes to Handlebars 3.x

mattolson added 2 commits

June 29, 2019 10:10


          STRF-6929: Fix RCE in Handlebars

c22099e


          Fix git tag retrieval for non-master branch

322c2b3

zvuki approved these changes

View reviewed changes

mattolson merged commit 0277d62 into bigcommerce:3.x

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment