LiquidJS is vulnerable to Denial of Service via circular block reference in layout

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-41311 · CVE overview and exploitation status

EUVD-2026-28886

GHSA-4rc3-7j7w-m548

cve-program · CVE-2026-41311

• https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548
• https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0
• https://github.com/harttle/liquidjs/releases/tag/v10.25.7

euvd · EUVD-2026-28886

• https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548
• https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0
• https://github.com/harttle/liquidjs/releases/tag/v10.25.7

nvd · CVE-2026-41311

• https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0
• https://github.com/harttle/liquidjs/releases/tag/v10.25.7
• https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548

osv · GHSA-4rc3-7j7w-m548

• https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548
• https://nvd.nist.gov/vuln/detail/CVE-2026-41311
• https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0
• https://github.com/harttle/liquidjs
• https://github.com/harttle/liquidjs/releases/tag/v10.25.7

No related changes are available here.