Approved changes feed: RSS · Atom
cpe:2.3:a:jg-rp:liquid:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jg Rp (146d8da1-385a-5d8e-b0c9-0b743abbe2ae) |
|---|---|
| Product | Liquid (9758718b-f8f9-556e-acf0-5e0476b6b3a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-55865 |
vulnerable | 2026-07-29 01:00:28.657569 |
Python Liquid: Infinite loop when parsing malformed `{% case %}` tags
Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed {% case %} tag without an associated {% when %} or {% else %} block and no terminating {% endcase %} tag, Python Liquid hangs in an infinite loop at parse time because liquid.TokenStream.eof did not give the EOF token matching kind and value fields, allowing malicious template authors to craft templates for a denial of service attack. This issue is fixed in version 2.2.1.
Published: 2026-07-09T20:34:38.618Z
Updated: 2026-07-14T01:16:10.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45017 |
vulnerable | 2026-06-08 08:05:11.418990 |
Python Liquid: Absolute paths escape filesystem loader search path
Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search paths when given an absolute path to resolve. This allows malicious template authors to load and render arbitrary files via the {% include %} and {% render %} tags. Targeted files would need to contain valid Liquid markup and be readable by the application process. This vulnerability is fixed in 2.2.0.
Published: 2026-05-28T14:24:27.928Z
Updated: 2026-05-28T15:57:12.837Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.