LI
Product
Liquidjs
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add Liquidjs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39859 | 7.5 | Apr 8 | LiquidJS has a renderFile() / parseFile() bypass configured root and allow arbitrary file read Affected: before 10.25.3 |
| CVE-2026-39412 | 7.5 | Apr 8 | LiquidJS has an ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel Affected: before 10.25.4 |
| CVE-2026-35525 | 7.5 | Apr 8 | LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates Affected: before 10.25.3 |
| CVE-2026-33285 | 7.5 | Mar 26 | LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash Affected: before 10.25.1 |
| CVE-2026-33287 | 7.5 | Mar 26 | LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern Affected: before 10.25.1 |
| CVE-2026-30952 | 7.5 | Mar 10 | liquidjs has a path traversal fallback vulnerability Affected: before 10.25.0 |
Showing 6