liquid vulnerabilities

2 known vulnerabilities in liquid from Jg-rp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  liquid: Loop with Unreachable Exit Condition

  CVE-2026-55865Jul 9, 2026Jg-rp

  Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed {% case %} tag without an associated {% when %} or {% else %} block and no terminating {% endcase %} tag, Python Liquid hangs in an infinite loop at parse time

• 7.5 High severity

  liquid: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-45017May 28, 2026Jg-rp

  Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search paths when given an absolute path to resolve. This allows malic