Skip to content
OpenAdvisories

Product · harttle

liquidjs

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-30952 Public exploit

    liquidjs has a path traversal fallback vulnerability

    liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.0, the layout, render, and include tags allow arbitrary file access via absolute paths (either as string literals or through Liquid variables, the latter requir…

    harttle liquidjs liquidjs npm