Vulnerability in TypeScript-Website project

[ankitdn]

While working on TypeScript-Website project, I scanned the dependency manifest and found that it uses a vulnerable version of handlebars. The scan revealed a prototype pollution issue where partial template resolution can access polluted prototype properties, potentially leading to XSS if malicious content is rendered without proper escaping.

CVE Report
CVE Link

[jakebailey]

This is a static website. Where would the malicious content come from?

[ufukty]

Where would the malicious content come from?

Technically PRs. But, reviewers would catch and without sessions there is nothing to steal or impersonate. Looks safe to close?