Bower1.8.8 has a version of handlebars that caused Prototype Pollution.

Question

nli8n opened this issue 4 years ago · comments

Bower1.8.8 has a version of handlebars that caused Prototype Pollution.
Please upgrade handlebars to 4.5.3

Adam Stankiewicz · Answer 1 · Tue Jan 12 2021 02:57:52 GMT+0800 (China Standard Time)

Upgrade of handlebars will be released in 1.8.9 soon

Priyanka Gurnani · Answer 2 · Tue Jan 12 2021 12:22:48 GMT+0800 (China Standard Time)

@sheerun : is bower going to release new version 1.8.9??

Adam Stankiewicz · Answer 3 · Tue Jan 12 2021 18:52:55 GMT+0800 (China Standard Time)

Yes, today

On Tue, 12 Jan 2021 at 05:23, Priyanka Gurnani ***@***.***> wrote: @sheerun <https://github.com/sheerun> : is bower going to release new version 1.8.9?? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2580 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AACHMDKQOXE7W737E6BR2YTSZPFCNANCNFSM4M2KDQMA> .