LiquidJS
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 22, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce
LiquidJS is vulnerable to Denial of Service via circular block reference in layout
LiquidJS has a renderFile() / parseFile() bypass configured root and allow arbitrary file read
LiquidJS has an ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel
LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates
LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filter
LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern
LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash
liquidjs has a path traversal fallback vulnerability
Monitor LiquidJS in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.