Skip to content
Threat Feed

Tag

Memory-Amplification

1 brief RSS
critical advisory

LiquidJS replace_first Filter Exponential Memory Amplification DoS

The `replace_first` filter in LiquidJS is vulnerable to exponential memory amplification due to its use of JavaScript's `String.prototype.replace()` and mishandling of the `$&` backreference pattern, allowing attackers to bypass the `memoryLimit` and cause denial of service.

liquidjs denial-of-service memory-amplification
2r 1t