AIKIDO-2026-788394
liquidpy is vulnerable to Code Injection
88
High Risk
This Affects:
liquidpyTL;DR
liquidpy compiles Liquid templates into Jinja2 and renders them with a plain Jinja2 Environment instead of a sandboxed one. Because attribute resolution is unrestricted, template expressions can reach dunder attributes such as __globals__ and use stock Jinja2 globals like lipsum to obtain the os module and run operating-system commands. Rendering a user-editable template executes arbitrary Python with the privileges of the service process across the standard, jekyll, and shopify modes. The fix adds an opt-in sandboxed rendering mode backed by Jinja2 SandboxedEnvironment and allows passing a custom environment.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you render untrusted Liquid templates.
Background info
liquidpy is vulnerable to Code Injection in versions 0.7.0 - 0.9.0.
How to fix this
Upgrade the liquidpy library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.