CVE:CVE-2021-32820
CNNVD:CNNVD-202105-955
handlebars是一款语义化的Web模板系统。
Express-handlebars 存在代码注入漏洞，布局参数可能会在下游应用程序中触发文件公开漏洞。
solution:Upgrade express_handlebars_project express_handlebars to a higher version than 5.3.2,and avoid the version (,5.3.2]