liquidjs has a path traversal fallback vulnerability

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-30952 · CVE overview and exploitation status

EUVD-2026-10872

GHSA-wmfp-5q7x-987x

cve-program · CVE-2026-30952

• https://github.com/harttle/liquidjs/security/advisories/GHSA-wmfp-5q7x-987x
• https://github.com/harttle/liquidjs/pull/851
• https://github.com/harttle/liquidjs/pull/855
• https://github.com/harttle/liquidjs/commit/3cd024d652dc883c46307581e979fe32302adbac

euvd · EUVD-2026-10872

• https://github.com/harttle/liquidjs/security/advisories/GHSA-wmfp-5q7x-987x
• https://github.com/harttle/liquidjs/pull/851
• https://github.com/harttle/liquidjs/pull/855
• https://github.com/harttle/liquidjs/commit/3cd024d652dc883c46307581e979fe32302adbac

nvd · CVE-2026-30952

• https://github.com/harttle/liquidjs/commit/3cd024d652dc883c46307581e979fe32302adbac
• https://github.com/harttle/liquidjs/pull/851
• https://github.com/harttle/liquidjs/pull/855
• https://github.com/harttle/liquidjs/security/advisories/GHSA-wmfp-5q7x-987x

osv · GHSA-wmfp-5q7x-987x

• https://github.com/harttle/liquidjs/security/advisories/GHSA-wmfp-5q7x-987x
• https://nvd.nist.gov/vuln/detail/CVE-2026-30952
• https://github.com/harttle/liquidjs/pull/851
• https://github.com/harttle/liquidjs/pull/855
• https://github.com/harttle/liquidjs/commit/3cd024d652dc883c46307581e979fe32302adbac
• https://github.com/harttle/liquidjs

No related changes are available here.