The security policy can be found at https://github.com/expressjs/.github/blob/master/SECURITY.md
Repository navigation
Security: pillarjs/hbs
Security
SECURITY.md
-
hbs vulnerable to Denial of Service via unhandled exception in async helper output escapingGHSA-3c55-w9jx-p5jr published
Sep 11, 2026 by UlisesGasconModerate -
hbs vulnerable to XSS via registerAsyncHelper output-escaping bypassGHSA-rg36-rxv9-2m9q published
Aug 25, 2026 by UlisesGasconHigh
Learn more about advisories related to pillarjs/hbs in the GitHub Advisory Database