Post
Ulises Gascón
ulisesgascon.com
did:plc:rgn3ralkvtzgv5a6f74ee7ba
🚨 High-severity security fix in hbs@4.3.0 just released!
Patches CVE-2026-16231. XSS via registerAsyncHelper output-escaping bypass.
https://github.com/pillarjs/hbs/security/advisories/GHSA-rg36-rxv9-2m9q
2026-08-25T10:03:32.967Z