npm/liquidjs CVE-2022-25948: medium 5.3, EPSS 1.01%
liquidjs may leak properties of a prototype
Action: Upgrade liquidjs to 10.0.0 or later.
npm i liquidjs@10.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.0.0 | - |
Fixed versions
| 10.0.0 |
Sources
- osv: GHSA-45rm-2893-5f49
- https://nvd.nist.gov/vuln/detail/CVE-2022-25948
- https://github.com/harttle/liquidjs/issues/454
- https://github.com/harttle/liquidjs/commit/7e99efc5131e20cf3f59e1fc2c371a15aa4109db
- https://github.com/harttle/liquidjs/commit/7eb621601c2b05d6e379e5ce42219f2b1f556208
- https://github.com/harttle/liquidjs
- https://groups.google.com/u/0/a/snyk.io/g/report/c/9ipXecWRtTM/m/IgLadevtCQAJ
- https://security.snyk.io/vuln/SNYK-JS-LIQUIDJS-2952868
CVE-2022-25948 · published · modified · JSON