IBM Support

IT32266: MULTIPLE SECURITY VULNERABILITIES IN "HANDLEBARS" PACKAGE (API CONNECT GATEWAY SERVICE)

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The API Connect Gateway Service includes the "handlebars"
    Node.js package.  The currently included version of that package
     has multiple security vulnerabilities that need to be addressed
    by updating the package to a later version that resolves the
    vulnerabilities.
    

Local fix

Problem summary

  • API connect  handlebars  Node.js package update.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IT32266

  • Reported component name

    DATAPOWER

  • Reported component ID

    DP1234567

  • Reported release

    18X

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-03-31

  • Closed date

    2020-05-01

  • Last modified date

    2020-05-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DATAPOWER

  • Fixed component ID

    DP1234567

Applicable component levels

  • R100 PSY

       UP

  • R18X PSY

       UP

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateways"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"18X"}]

Document Information

Modified date:
28 September 2021