security issue -> plop -> node-plop -> handlebars

[tbalbacete]

security issue -> plop -> node-plop -> handlebars

The latest version of plop is using a version of handlebars that contains a Critical Security Vulnerability referenced in this CVE:
https://www.resolvedsecurity.com/vulnerability-catalog/CVE-2026-33937

Version for handlebars needs to be bumped to at least 4.7.9.

[aaron-stoddart]

Looks like this should be resolved by #499 but not sure when these PRs are checked, especially given this has a failure.

[sekhavati]

Sorry to bump this, but is there any plans to update the version of this dependency?

This is reported as a critical vulnerability by GitHub/Dependabot

[aaron-stoddart]

Hi @amwmedia , @crutchcorn , @evelynhathaway, is there chance this PR can be looked into? It's a critical issue marked by github.