VULN UPGRADE: handlebars (patch → 4.7.8) [node_modules/@octokit]

[campaigner-prod]

Summary: Critical-severity security update — 1 package upgraded (patch changes only)

Manifests changed:

• node_modules/@octokit (npm)

Updates

Package	From	To	Type	Vulnerabilities Fixed
handlebars	4.7.6	4.7.8	patch	2 CRITICAL

---

Security Details

🚨 Critical & High Severity (2 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
handlebars	GHSA-765h-qjxv-5f44	CRITICAL	Prototype Pollution in handlebars	4.7.6	4.7.7
handlebars	GHSA-f2jv-r9rf-7988	CRITICAL	Remote code execution in handlebars when compiling templates	4.7.6	4.7.7

---

Review Checklist

Enhanced review recommended for this update:

• Review changes for compatibility with your code
• Check release notes for breaking changes
• Run integration tests to verify service behavior
• Test in staging environment before production
• Monitor key metrics after deployment

---

Update Mode: Vulnerability Remediation (Critical)

🤖 Generated by DataDog Automated Dependency Management System