Is CVE-2026-45618 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-45618?

CVE-2026-45618 has a CVSS v3 severity of CRITICAL (10).

Back

CVE-2026-45618

Description

LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.