[Snyk] Upgrade hbs from 4.0.1 to 4.2.0

[snyk-bot]

Snyk has created this PR to upgrade hbs from 4.0.1 to 4.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released a year ago, on 2021-11-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-469063	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-174183	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-173692	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-559764	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-HANDLEBARS-567742	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-HANDLEBARS-1279029	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-HANDLEBARS-534988	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: hbs

• 4.2.0 - 2021-11-17
  

  v4.2.0

• 4.1.2 - 2021-04-15
  

  v4.1.2

• 4.1.1 - 2020-04-04
  

  v4.1.1

• 4.1.0 - 2020-01-15
  

  v4.1.0

• 4.0.6 - 2019-10-09
  

  v4.0.6

• 4.0.5 - 2019-09-27
  

  v4.0.5

• 4.0.4 - 2019-04-15
  

  v4.0.4

• 4.0.3 - 2019-03-01
  

  v4.0.3

• 4.0.2 - 2019-02-19
  

  v4.0.2

• 4.0.1 - 2016-09-18
  

  v4.0.1

from hbs GitHub release notes

Commit messages

Package name: hbs

• 5790e5e v4.2.0
• 1ef46ee build: [email protected]
• 9771a6f build: [email protected]
• e501201 build: update CI for npm TLS upgrade
• 9f1fee2 docs: fix linux build badge
• 9bd9de2 docs: add preamble to install section
• 73559c1 Add rename option to registerPartials
• 3b34543 build: [email protected]
• df4fd3d build: [email protected]
• e5e6e39 deps: [email protected]
• 22378a2 build: [email protected]
• 7b3bff3 tests: add test for register partials callback
• 2861f42 Ensure all partials are registered before rendering
• 9721886 tests: clean up async tests
• ccd359c lint: remove usage of console
• 2a9349b Fix function context in async helpers
• ff0dac5 tests: add test for helper function context
• 6853fc6 tests: clean up package.json
• b0b2845 build: [email protected]
• b24aab5 build: [email protected]
• bddf728 build: [email protected]
• a08f463 build: [email protected]
• 599c906 build: [email protected]
• 4b0ba34 build: [email protected]

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs