CVE-2026-45618 in LiquidJS

Riassunto

di MITRE • 11/08/2026

LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: GitHub M
• Prenotare: 12/05/2026
• Divulgazione: 11/08/2026
• Moderazione: accettato
• Voce: VDB-388554
• CPE: pronto
• CWE: CWE-94 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-45618
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-45618
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-45618/