liquidjs kayıtları
liquidjs üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %77,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-400 Uncontrolled Resource Consumption1
- CWE-61 UNIX Symbolic Link (Symlink) Following1
- CWE-674 Uncontrolled Recursion1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-30952Kavram kanıtı | liquidjs has a path traversal fallback vulnerabilityliquidjs · liquidjs · CWE-22 | Yüksek8,7 | — | %0,5 | 10 Mar 2026 |
32İzleyin | CVE-2026-35525İstismar yok | LiquidJS has a root restriction bypass for partial and layout loading through symlinked templatesliquidjs · liquidjs · CWE-61 | Yüksek8,2 | — | %0,5 | 8 Nis 2026 |
30İzleyin | CVE-2026-33285İstismar yok | LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crashliquidjs · liquidjs · CWE-20 | Yüksek7,5 | — | %0,6 | 25 Mar 2026 |
30İzleyin | CVE-2026-33287İstismar yok | LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Patternliquidjs · liquidjs · CWE-20 | Yüksek7,5 | — | %0,5 | 25 Mar 2026 |
30İzleyin | CVE-2026-39412İstismar yok | LiquidJS has an ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channelliquidjs · liquidjs · CWE-200 | Yüksek7,5 | — | %0,5 | 8 Nis 2026 |
26İzleyin | CVE-2026-41311İstismar yok | LiquidJS is vulnerable to Denial of Service via circular block reference in layoutliquidjs · liquidjs · CWE-674 | Orta6,5 | — | %0,6 | 9 May 2026 |
25İzleyin | CVE-2026-39859İstismar yok | LiquidJS has a renderFile() / parseFile() bypass configured root and allow arbitrary file readliquidjs · liquidjs · CWE-22 | Orta6,3 | — | %0,5 | 8 Nis 2026 |
21İzleyin | CVE-2022-25948İstismar yok | Information Exposureliquidjs · liquidjs · CWE-200 | Orta5,3 | — | %0,8 | 22 Ara 2022 |
21İzleyin | CVE-2026-34166İstismar yok | LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filterliquidjs · liquidjs · CWE-400 | Orta5,3 | — | %0,6 | 8 Nis 2026 |
- CVE-2026-3095234İzleyin
liquidjs has a path traversal fallback vulnerability
YüksekCVSS 8,7Kavram kanıtıEPSS %1liquidjs · liquidjs10 Mar 2026
- CVE-2026-3552532İzleyin
LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates
YüksekCVSS 8,2İstismar yokEPSS %1liquidjs · liquidjs8 Nis 2026
- CVE-2026-3328530İzleyin
LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash
YüksekCVSS 7,5İstismar yokEPSS %1liquidjs · liquidjs25 Mar 2026
- CVE-2026-3328730İzleyin
LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern
YüksekCVSS 7,5İstismar yokEPSS %1liquidjs · liquidjs25 Mar 2026
- CVE-2026-3941230İzleyin
LiquidJS has an ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel
YüksekCVSS 7,5İstismar yokEPSS %0liquidjs · liquidjs8 Nis 2026
- CVE-2026-4131126İzleyin
LiquidJS is vulnerable to Denial of Service via circular block reference in layout
OrtaCVSS 6,5İstismar yokEPSS %1liquidjs · liquidjs9 May 2026
- CVE-2026-3985925İzleyin
LiquidJS has a renderFile() / parseFile() bypass configured root and allow arbitrary file read
OrtaCVSS 6,3İstismar yokEPSS %1liquidjs · liquidjs8 Nis 2026
- CVE-2022-2594821İzleyin
Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %1liquidjs · liquidjs22 Ara 2022
- CVE-2026-3416621İzleyin
LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filter
OrtaCVSS 5,3İstismar yokEPSS %1liquidjs · liquidjs8 Nis 2026