If you're for instance relying on handlebars to escape displayed content from user input properly and your version has a vulnerability...