CVE-2022-25948 — Information Exposure
The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Wor…
Published: 2022-12-23 · CVSS: 5.3 · CVSS 3.1
The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7