Skip to content
Sign in
5.3 Medium

CVE-2022-25948 The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to…

Description

The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.

Affected products and versions

Product Affected versions Fixed in
liquidjs 10.0 earliest → < 10.0.0 10.0.0
Track this CVE