{"schema":"vulnpedia.research/1","cve":"CVE-2026-106444","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7","tags":["x_refsource_CONFIRM","exploit","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-06T19:48:02.050Z","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7"},{"source":"nvd","sourceId":"CVE-2026-106444","modified":"2026-10-07T13:58:29.527","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7"},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xw65-4hp5-5hc7"}]},{"url":"https://github.com/handlebars-lang/handlebars.js/pull/2185","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","url":"https://github.com/handlebars-lang/handlebars.js/pull/2185"},{"source":"nvd","sourceId":"CVE-2026-106444","modified":"2026-10-07T13:58:29.527","url":"https://github.com/handlebars-lang/handlebars.js/pull/2185"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://github.com/handlebars-lang/handlebars.js/pull/2185"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://github.com/handlebars-lang/handlebars.js/pull/2185"},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://github.com/handlebars-lang/handlebars.js/pull/2185"}]},{"url":"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","url":"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"},{"source":"nvd","sourceId":"CVE-2026-106444","modified":"2026-10-07T13:58:29.527","url":"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"}]},{"url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:01:14.626Z","url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"},{"source":"nvd","sourceId":"CVE-2026-106444","modified":"2026-10-07T13:58:29.527","url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"}]},{"url":"https://osv.dev/vulnerability/GHSA-xw65-4hp5-5hc7","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","origins":[{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://osv.dev/vulnerability/GHSA-xw65-4hp5-5hc7"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://osv.dev/vulnerability/GHSA-xw65-4hp5-5hc7"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106444","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","origins":[{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106444"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106444"},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106444"}]},{"url":"https://github.com/handlebars-lang/handlebars.js","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","origins":[{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://github.com/handlebars-lang/handlebars.js"},{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://github.com/handlebars-lang/handlebars.js"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106444","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-106444"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547089","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547089"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106444","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-106444"}]},{"source":"euvd","sourceId":"EUVD-2026-93974","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93974","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93974","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93974"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","url":"https://osv.dev/vulnerability/GHSA-xw65-4hp5-5hc7","ecosystem":"npm","name":"handlebars","purl":"pkg:npm/handlebars","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.7.10"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 4.7.9","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-xw65-4hp5-5hc7/GHSA-xw65-4hp5-5hc7.json"},"modified":"2026-10-08T18:00:09.713255773Z","origins":[{"source":"ghsa","sourceId":"GHSA-xw65-4hp5-5hc7","modified":"2026-10-08T18:00:09.713255773Z","url":"https://osv.dev/vulnerability/GHSA-xw65-4hp5-5hc7"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:dotnet8.0.src","product":"dotnet8.0.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/dotnet8.0@8.0.130-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:grafana12.4.src","product":"grafana12.4.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.3.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:grafana13.1.src","product":"grafana13.1.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana13.1@13.1.7-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:grafana13.2.src","product":"grafana13.2.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:jaeger.src","product":"jaeger.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/jaeger@2.20.0-0.11.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:opentelemetry-collector-contrib.src","product":"opentelemetry-collector-contrib.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentelemetry-collector-contrib@0.162.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:opentelemetry-collector-k8s.src","product":"opentelemetry-collector-k8s.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentelemetry-collector-k8s@0.162.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:opentelemetry-collector.src","product":"opentelemetry-collector.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentelemetry-collector@0.162.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:prometheus3.13.src","product":"prometheus3.13.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/prometheus3.13@3.13.3-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]},{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json","productId":"red_hat_hardened_images:yarnpkg.src","product":"yarnpkg.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/yarnpkg@1.22.22-18.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106444","modified":"2026-10-15T23:33:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106444.json"}]}],"vendorCoverage":{"total":10,"shown":10,"omitted":0,"source":"redhat"}}