Harttle Liquidjs vulnerabilities

• harttle liquidjs LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration CVE-2026-106120 Fix available 6.0 MediumOctober 6, 2026
• harttle liquidjs LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process CVE-2026-69222 Fix available 7.5 HighAugust 19, 2026
• harttle liquidjs LiquidJS: An infinite loop vulnerability in `strip_html` filter CVE-2026-61556 Fix available 8.7 HighAugust 19, 2026
• harttle liquidjs LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce CVE-2026-55575 Fix available 8.2 HighJuly 8, 2026
• harttle liquidjs LiquidJS is Vulnerable to Remote Code Execution CVE-2026-45618 Fix available 10.0 CriticalMay 27, 2026
• harttle liquidjs LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regex CVE-2026-45617 Fix available 7.5 HighMay 27, 2026
• harttle liquidjs LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime) CVE-2026-45357 Fix available 7.5 HighMay 27, 2026
• harttle liquidjs LiquidJS: `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()` CVE-2026-44646 Fix available 5.3 MediumMay 27, 2026
• harttle liquidjs LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body CVE-2026-44645 Fix available 6.5 MediumMay 27, 2026
• harttle liquidjs LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS CVE-2026-44644 Fix available 6.1 MediumMay 27, 2026
• harttle liquidjs LiquidJS is vulnerable to Denial of Service via circular block reference in layout CVE-2026-41311 Fix available 7.5 HighApril 24, 2026
• harttle liquidjs LiquidJS has a renderFile() / parseFile() bypass configured root and allow arbitrary file read CVE-2026-39859 Fix available 6.3 MediumApril 8, 2026
• harttle liquidjs LiquidJS has an ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel CVE-2026-39412 Fix available 5.3 MediumApril 8, 2026
• harttle liquidjs LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates CVE-2026-35525 Fix available 8.2 HighApril 8, 2026
• harttle liquidjs LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filter CVE-2026-34166 Fix available 3.7 LowApril 8, 2026
• harttle liquidjs LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern CVE-2026-33287 Fix available 7.5 HighMarch 25, 2026
• harttle liquidjs LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash CVE-2026-33285 7.5 HighMarch 25, 2026
• harttle liquidjs liquidjs has a path traversal fallback vulnerability CVE-2026-30952 Public exploitFix available 8.7 HighMarch 10, 2026
• harttle liquidjs Information Exposure CVE-2022-25948 Fix available 5.3 MediumDecember 22, 2022