THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-4r6h-5v86-94p3 (high) — LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

[GHSA] GHSA-4r6h-5v86-94p3 (high) — LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

medgithub_advisoriesPublished 2026-09-08

GHSA-4r6h-5v86-94p3 Severity: high CVE: CVE-2026-69222

LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

### Summary

The `join` filter (`src/filters/array.ts:8-13`) charges `memoryLimit` by array element **count**, not by the string length it produces, letting a template bypass a configured `memoryLimit` and alloca

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://github.com/advisories/GHSA-4r6h-5v86-94p3