Skip to content

LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime)

High severity GitHub Reviewed Published May 24, 2026 in harttle/liquidjs • Updated Jul 9, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts