CVE-2026-69222
1 advisory.
npm/liquidjs CVE-2026-69222: high 7.5, EPSS 0.63%
LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
Action: Upgrade liquidjs to 10.27.2 or later.
npm i liquidjs@10.27.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.27.2 | - |
Fixed versions
| 10.27.2 |
Sources
- osv: GHSA-4r6h-5v86-94p3
- https://github.com/harttle/liquidjs/security/advisories/GHSA-4r6h-5v86-94p3
- https://nvd.nist.gov/vuln/detail/CVE-2026-69222
- https://github.com/harttle/liquidjs/pull/925
- https://github.com/harttle/liquidjs/commit/7ab49f999ac045ec1e87f3a7a9fd68dd9e8602b3
- https://github.com/harttle/liquidjs
- https://github.com/harttle/liquidjs/releases/tag/v10.27.2
CVE-2026-69222 · published · modified · JSON