Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Liquidjs MEDIUM 6.5
CVE-2026-41311

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in {% layout…

Fix: 10.25.7+
Fix from $1,600 2026-05-09
Liquidjs HIGH 7.5
CVE-2026-39859

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, liquidjs 10.25.0 documents root as constraining…

Fix: 10.25.3+
Fix from $1,950 2026-04-08
Liquidjs HIGH 7.5
CVE-2026-39412

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.4, the sort_natural filter bypasses the ownPropert…

Fix: 10.25.4+
Fix from $1,950 2026-04-08
Liquidjs HIGH 7.5
CVE-2026-35525

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, for {% include %}, {% render %}, and {% layout …

Fix: 10.25.3+
Fix from $1,950 2026-04-08
Liquidjs MEDIUM 5.3
CVE-2026-34166

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, the replace filter in LiquidJS incorrectly acco…

Fix: 10.25.3+
Fix from $1,600 2026-04-08
Liquidjs HIGH 7.5
CVE-2026-33285

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, LiquidJS's `memoryLimit` security mecha…

Fix: 10.25.1+
Fix from $1,950 2026-03-26
Liquidjs HIGH 7.5
CVE-2026-33287

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, the `replace_first` filter in LiquidJS …

Fix: 10.25.1+
Fix from $1,950 2026-03-26
Liquidjs HIGH 7.5
CVE-2026-30952

liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.0, the layout, render, and include tags allow arbi…

Fix: 10.25.0+
Fix from $1,950 2026-03-10
Liquidjs MEDIUM 5.3
CVE-2022-25948

The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking pr…

Fix: 10.0.0+
Fix from $1,600 2022-12-22