Regarding the PHP vulnerabilities disclosed on October 21, 2026 (CVE-2026-109618 and CVE-2026-109619), we have reviewed their impact on all of our Shopify apps: Japan Order CSV, Delete Me, Mockingbird, Mypage Blocks, and B2E, our employee sales app. None of these apps use PHP, so they are not affected by these vulnerabilities. Merchants using our apps do not need to take any action, such as updating or changing settings.

We continuously monitor published vulnerability information and will notify our users promptly if any impact is expected. If you have any questions about this matter, please contact the support desk for the app you use.

Contact us
Contact
Back to Glossary

Liquid

Shopify

Definition

A template language developed by Shopify. Using syntax such as {{ product.title }}, it assembles storefront HTML dynamically.

Background

Shopify themes — the look and feel of an online store — are built in Liquid, organized into files such as product.liquid, cart.liquid, and shop.liquid. In recent years Shopify has been driving a migration to a stricter syntax, known as the Strict / Rigid Liquid Migration.

Flagship's Involvement

A core technology we work with daily in client theme builds and customizations. Internally, we encourage engineers to obtain Shopify's official certification, "Liquid Storefronts for Theme Developers."

Back to Glossary Top