Skip to content

[GHSA-9x9p-qf8f-mvjg] LiquidJS's {% render %} tag silently bypasses per-render ownPropertyOnly:true via Context.spawn() - #10378

Open
SiteQ8 wants to merge 1 commit into
SiteQ8/advisory-improvement-10378from
SiteQ8-GHSA-9x9p-qf8f-mvjg
Open

SiteQ8 wants to merge 1 commit into
SiteQ8/advisory-improvement-10378from
SiteQ8-GHSA-9x9p-qf8f-mvjg

Commits

  1. Commits on Oct 15, 2026