Read the docs

harttle

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

harttle records in CISA KEV

No harttle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Liquidjs 9 records HIGH

Records

9 records in Liquidjs · all components

TI-2026-28394 CVE-2026-39412 · GHSA-rv5g-f82m-qrvv

Information disclosure in harttle liquidjs

Priority HIGH 72

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0041 Published 2026-04-08 Fixed in 10.25.4 CWE-200
TI-2022-09484 CVE-2022-25948 · GHSA-45rm-2893-5f49

Information exposure in liquidjs

Priority MEDIUM 63

The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01006 Published 2022-12-23 Fixed in 10.0.0 CWE-200
TI-2026-23777 CVE-2026-30952 · GHSA-wmfp-5q7x-987x

liquidjs has a path traversal fallback vulnerability

Priority MEDIUM 45

liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00615 Published 2026-03-10 Fixed in 10.25.0 CWE-22
Open these records in search →