Cpe:2.3:a:liquidjs:liquidjs:*:*:*:*:*:node.js:*:*

An infinite loop vulnerability in the LiquidJS strip_html filter, tracked as CVE-2026-61556, allows attackers to trigger a process-wide denial of service by providing specific malformed HTML strings.