10.0 CriticalCWE-94
CVE-2026-45618
harttle liquidjs vulnerability
harttleliquidjs
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 19 Oct
0.8%probability of exploitation in the next 30 days
Higher than 56% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.
Coverage 1 article · 1 outlet
- Critical Liquidjs Flaw (CVE-2026-45618) Lets Attackers Run CodeSecurityOnline · first in our coverage