CVE-2026-45618Published
LiquidJS is Vulnerable to Remote Code Execution
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-45618 · Microsoft / collected KEV context
cve-program · CVE-2026-45618
- https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc
- https://github.com/harttle/liquidjs/releases/tag/v10.26.0
euvd · EUVD-2026-56922
- https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc
- https://github.com/harttle/liquidjs/releases/tag/v10.26.0
nvd · CVE-2026-45618
- https://github.com/harttle/liquidjs/releases/tag/v10.26.0
- https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc
osv · GHSA-gf2q-c269-pqgc
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.