Skip to content
OpenAdvisories

Package · npm

liquidjs

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-30952 Public exploit

    liquidjs has a path traversal fallback vulnerability

    liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.0, the layout, render, and include tags allow arbitrary file access via absolute paths (either as string literals or through Liquid variables, the latter requir…

    harttle liquidjs liquidjs npm