关于 4.x 版本依赖的 handlebars 存在漏洞的问题

Assessment

This issue has not been assessed yet.

Description

Contributor guide

No contributing guide indexed for this repository

First steps

1. Read the whole issue, then the project's contributing guide.
2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
3. Fork the repository and make your change on a branch.
4. Open a pull request that references the issue number.

More from eggjs/bin

• npm RFC #868 will block this package's install script by default Open

  eggjs/bin#294 · 1 comment · 1 assignee · Opened Jun 1, 2026

• 指定环境运行不打印日志不能热更新 Open

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  eggjs/bin#293 · Opened Apr 29, 2026

• 最新版无法获取config.default.js中通过config.cluster配置的端口号 Open
  bug

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  eggjs/bin#280 · 2 comments · Opened Dec 18, 2024

• 【功能需求】--inspect-brk 支持指定 debugger ip 和 port Open

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  eggjs/bin#271 · Opened Jun 5, 2024

• openSCA对框架依赖扫描结果中的漏洞问题 Open

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  eggjs/bin#270 · 5 comments · Opened Jun 3, 2024

All issues in eggjs/bin

Similar issues

• Show actual screenshot artifact expiry in PR evidence Open

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  copse-dev/agent-pane#2953 · Opened Sep 22, 2026

• [Bug] 忙碌时无法发送消息：排队功能已实现但入口被禁用，只能先点「停止」 Open

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  Eynzof/Hermes-CN-Desktop#610 · Opened Sep 22, 2026

• [Bug]: Matrix progress drafts fail with "Matrix runtime not initialized" during tool activity Open
  bug clawsweeper:linked-pr-open clawsweeper:needs-live-repro clawsweeper:no-new-fix-pr impact:message-loss issue-rating: 🐚 platinum hermit P2 regression

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  openclaw/openclaw#155298 · 2 comments · 1 reaction · Opened Sep 22, 2026

• Client support matrix inclusion Open
  enhancement

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  modelcontextprotocol/ext-tasks#22 · Opened Sep 22, 2026

• [Puppeteer] Remove deprecated `getElementXY` helper and update usage Open
  calcite-components needs triage refactor

  Difficulty 2/5 1-3 hours Newbie friendliness 75/100

  Esri/calcite-design-system#15203 · Opened Sep 21, 2026

More TypeScript issues