LI
Product
Liquidjs
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add Liquidjs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41311 | 6.5 | May 9 | LiquidJS is vulnerable to Denial of Service via circular block reference in layout Affected: before 10.25.7 |
| CVE-2026-34166 | 5.3 | Apr 8 | LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filter Affected: before 10.25.3 |
| CVE-2022-25948 | 5.3 | Dec 22 | The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype Affected: before 10.0.0 |
Showing 3