LiquidJS: pop filter bypasses memoryLimit accounting that its array-filter siblings enforce
npm liquidjs · Upgrade to 10.27.1 or later · <= 10.27.0 · CVE-2026-55575 · GHSA-g357-x5c3-c72p · amended