A vulnerability categorized as critical has been discovered in harttle liquidjs 10.25.0/10.25.1. This impacts the function
renderFile/parseFile. Executing a manipulation can lead to path traversal.
This vulnerability is handled as CVE-2026-39859. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
