CVE-2026-45618

LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.

严重CWE-94 全部 CVE

弱点类型

LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.

参考链接

https://github.com/harttle/liquidjs/releases/tag/v10.26.0
https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc
https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc

赶在攻击者之前发现漏洞。

使用 GitHub 登录，一分钟内即可运行你的第一次审计。免费版无需信用卡。

开始免费审计查看价格