H
Vendor security profile
harttle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical1
CISA KEV0
Public exploit3
Patch rate%25
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
0
1
CVE KEV
CVE severity distribution
4toplam CVE
Critical1 (25%)
High2 (50%)
Medium1 (25%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%75
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
6.0
CVE-2026-106120
LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
H
Patch status unknownEPSS %0
7.5
CVE-2026-69222
LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
H
Patch verifiedEPSS %1
8.7
CVE-2026-61556
LiquidJS: An infinite loop vulnerability in `strip_html` filter
H
Patch status unknownEPSS %1
10.0
CVE-2026-45618
LiquidJS is Vulnerable to Remote Code Execution
H
Patch status unknownEPSS %1