PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
liquidjs LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern High Risk 7.5 7 months ago 1 day ago
liquidjs LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime) High Risk 7.5 5 months ago 2 days ago
liquidjs LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS Medium Risk 6.1 5 months ago 3 days ago
liquidjs LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body Medium Risk 6.5 5 months ago 3 days ago
liquidjs LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()` Medium Risk 5.3 5 months ago 3 days ago
liquidjs LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration Medium Risk 6.0 23 days ago 23 days ago
liquidjs LiquidJS is Vulnerable to Remote Code Execution Critical 10.0 5 months ago 1 month ago
liquidjs LiquidJS: ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel Medium Risk 5.3 6 months ago 1 month ago
liquidjs LiquidJS Has Memory Limit Bypass via Quadratic Amplification in `replace` Filter Low Risk 3.7 6 months ago 1 month ago
liquidjs LiquidJS Vulnerable to ReDoS via Quadratic Backtracking in `strip_html` Filter Regex High Risk 7.5 5 months ago 1 month ago
liquidjs LiquidJS: `renderFile()` / `parseFile()` bypass configured `root` and allow arbitrary file read Medium Risk 6.0 6 months ago 1 month ago
liquidjs liquidjs has a Denial of Service via circular block reference in layout High Risk 7.5 6 months ago 1 month ago
liquidjs LiquidJS: Root restriction bypass for partial and layout loading through symlinked templates High Risk 7.5 6 months ago 1 month ago
liquidjs liquidjs has a path traversal fallback vulnerability High Risk 8.0 7 months ago 1 month ago
liquidjs LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process High Risk 7.5 1 month ago 1 month ago
liquidjs LiquidJS has an infinite loop vulnerability in its `strip_html` filter High Risk 8.0 1 month ago 1 month ago
liquidjs LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce High Risk 8.0 3 months ago 3 months ago
liquidjs LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash High Risk 7.5 7 months ago 7 months ago
liquidjs liquidjs may leak properties of a prototype Medium Risk 5.3 3 years ago 1 year ago
Data courtesy of OSV.dev
Page 1