Skip to content
OpenAdvisories

Package · PyPI

python-liquid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.1
    CVE-2026-55865

    Python Liquid: Infinite loop when parsing malformed `{% case %}` tags

    Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed {% case %} tag without an associated {% when %} or {% else %} block and no terminating {% endcase %} tag, Python Liquid hangs in an infinite loop at parse tim…

    jg-rp liquid python-liquid PyPI
  • High 8.2
    CVE-2026-45017

    Python Liquid: Absolute paths escape filesystem loader search path

    Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search paths when given an absolute path to resolve. This allows mali…

    jg-rp liquid python-liquid PyPI