Blackduck: Automated PR: Update handlebars/4.0.5 to 4.7.8

[github-actions]

Vulnerabilities associated with handlebars/4.0.5

BDSA-2018-4846 (HIGH): It was discovered the Handlebars package is vulnerable to arbitrary code execution via prototype pollution. A remote attacker could exploit this to run malicious code by modifying properties of the Object prototype.

BDSA-2019-3145 (HIGH): The handlebars package for Node.js is vulnerable to remote code execution (RCE) due to improper restrictions on object access in templates which can lead to prototype pollution. An attacker could exploit this vulnerability by supplying maliciously crafted input.

BDSA-2019-3682 (HIGH): The handlebars package is vulnerable to cross-site scripting (XSS) and remote code execution (RCE) attacks due to improper validation of user-supplied input. In a cross-site scripting scenario, an attacker could exploit this to pass malicious arbitrary JavaScript into template, which will execute when a victim visits the crafted page. If handlebars is used to run on the server side, remote code execution is possible.

BDSA-2019-3692 (HIGH): The handlebars package is vulnerable to arbitrary code execution via prototype pollution. A remote attacker can run malicious code by modifying properties of the Object prototype. Unsuccessful attacks may result in an application crash.

BDSA-2020-4765 (HIGH): handlebars.js, an extension to Mustache, contains a prototype pollution vulnerability. An attacker could exploit this issue by accessing prototype properties and methods, which may result in the attacker being able to force an application crash or gain the ability to execute arbitrary code.

BDSA-2021-0925 (HIGH): handlebars.js, an extension to the Mustache templating language, is vulnerable to remote code execution (RCE) when compiling templates that come from untrusted sources. Successful exploitation also requires certain compilation options to be used.

BDSA-2021-1225 (HIGH): handlebars.js, an extension to the Mustache templating language, is vulnerable to Prototype Pollution when compiling templates that come from untrusted sources. Although successful exploitation could result in remote code execution (RCE), it also requires that a certain compilation option is used.

Click Here To See More Details On Server