{"id":"EUVD-2026-56922","enisaUuid":"2f9199a0-c99e-309a-969a-f88ad8503e88","description":"LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.","datePublished":"Aug 11, 2026, 7:27:09 PM","dateUpdated":"Aug 13, 2026, 2:07:35 PM","baseScore":10.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc\nhttps://github.com/harttle/liquidjs/releases/tag/v10.26.0\n","aliases":"CVE-2026-45618\nGHSA-gf2q-c269-pqgc\n","assigner":"GitHub_M","epss":0.82,"enisaIdProduct":[{"id":"c51331c6-9114-3115-8b58-5c83f826c0a9","product":{"name":"liquidjs","vendor":{"name":"harttle"}},"product_version":"\u003c 10.26.0"}],"enisaIdVendor":[{"id":"8b97a12c-28d3-3be6-9d37-1741d56d9aeb","vendor":{"name":"harttle"}}],"enisaIdVulnerability":[{"id":"78e28957-2106-3926-907b-3c76fe0e6082","vulnerability":{"id":"GHSA-gf2q-c269-pqgc","description":"LiquidJS is Vulnerable to Remote Code Execution","datePublished":"May 27, 2026, 6:24:14 PM","dateUpdated":"May 27, 2026, 6:24:14 PM","baseScore":0.0,"references":"https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc\nhttps://github.com/harttle/liquidjs\nhttps://github.com/harttle/liquidjs/releases/tag/v10.26.0\n","enisa_id":"EUVD-2026-56922\n","aliases":"CVE-2026-45618\nGHSA-gf2q-c269-pqgc\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:03 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"963e54b5-4091-32ef-9b8e-6f987daf1fbf","vulnerability":{"id":"CVE-2026-45618","description":"LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.","datePublished":"Aug 11, 2026, 7:27:09 PM","dateUpdated":"Aug 13, 2026, 2:07:35 PM","status":"PUBLISHED","baseScore":10.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc\nhttps://github.com/harttle/liquidjs/releases/tag/v10.26.0\n","enisa_id":"EUVD-2026-56922\n","assigner":"GitHub_M","epss":0.82,"dataProcessed":"Nov 7, 2026, 7:21:28 AM","vulnerabilityProduct":[{"id":"6a6c26b0-990a-347f-8e0b-f8d72b199731","product":{"name":"liquidjs","vendor":{"name":"harttle"}},"product_version":"\u003c 10.26.0"}],"vulnerabilityVendor":[{"id":"65487ebf-02a6-3eb6-91a1-d140483ea44f","vendor":{"name":"harttle"}}]}}],"enisaIdAdvisory":[]}