Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

liquidjs — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in liquidjs, with AI-generated Chinese analysis, references, and POCs.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-39859 LiquidJS has a renderFile() / parseFile() bypass configured root and allow arbitrary file read CWE-22 4.9AIMediumAI2026-04-08
CVE-2026-39412 LiquidJS has an ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel CWE-200 5.3 Medium2026-04-08
CVE-2026-35525 LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates CWE-61 7.5AIHighAI2026-04-08
CVE-2026-34166 LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filter CWE-400 3.7 Low2026-04-08
CVE-2026-33285 LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash CWE-20 7.5 High2026-03-26
CVE-2026-33287 LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern CWE-20 7.5 High2026-03-26
CVE-2026-30952 liquidjs has a path traversal fallback vulnerability CWE-22 8.1AIHighAI2026-03-10
CVE-2022-25948 Information Exposure 5.3 Medium2022-12-23

All 8 known CVE vulnerabilities affecting liquidjs with full Chinese analysis, references, and POCs where available.