PyPI/python-liquid CVE-2026-45017: high 7.5, EPSS 0.34%
Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search pat
Action: Upgrade python-liquid to 2.2.0 or later.
pip install python-liquid==2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
CVE-2026-45017 · published · modified · JSON