Browse CVEs

MEDIUM 6.5 CVE-2026-41311 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in {% layout… Liquidjs 10.25.7+ Fix from $1,6002026-05-09 HIGH 7.5 CVE-2026-39859 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, liquidjs 10.25.0 documents root as constraining… Liquidjs 10.25.3+ Fix from $1,9502026-04-08 HIGH 7.5 CVE-2026-39412 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.4, the sort_natural filter bypasses the ownPropert… Liquidjs 10.25.4+ Fix from $1,9502026-04-08 HIGH 7.5 CVE-2026-35525 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, for {% include %}, {% render %}, and {% layout … Liquidjs 10.25.3+ Fix from $1,9502026-04-08 MEDIUM 5.3 CVE-2026-34166 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, the replace filter in LiquidJS incorrectly acco… Liquidjs 10.25.3+ Fix from $1,6002026-04-08 HIGH 7.5 CVE-2026-33285 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, LiquidJS's `memoryLimit` security mecha… Liquidjs 10.25.1+ Fix from $1,9502026-03-26 HIGH 7.5 CVE-2026-33287 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, the `replace_first` filter in LiquidJS … Liquidjs 10.25.1+ Fix from $1,9502026-03-26 HIGH 7.5 CVE-2026-30952 liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.0, the layout, render, and include tags allow arbi… Liquidjs 10.25.0+ Fix from $1,9502026-03-10 MEDIUM 5.3 CVE-2022-25948 The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking pr… Liquidjs 10.0.0+ Fix from $1,6002022-12-22