CVE-2026-61556
1 advisory.
npm/liquidjs CVE-2026-61556: high, EPSS 0.52%
LiquidJS has an infinite loop vulnerability in its `strip_html` filter
Action: Upgrade liquidjs to 10.27.1 or later.
npm i liquidjs@10.27.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.26.0 | 10.27.1 | - |
Fixed versions
| 10.27.1 |
Sources
- osv: GHSA-m7fp-h3p4-hr49
- https://github.com/harttle/liquidjs/security/advisories/GHSA-m7fp-h3p4-hr49
- https://nvd.nist.gov/vuln/detail/CVE-2026-61556
- https://github.com/harttle/liquidjs/pull/917
- https://github.com/harttle/liquidjs/commit/5c3522f33928aae66f0fe85c36e1d9015c768fe2
- https://github.com/harttle/liquidjs
- https://github.com/harttle/liquidjs/releases/tag/v10.27.1
CVE-2026-61556 · published · modified · JSON