Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-529h-vh3j-85hq
  • Packagist/twig/twig
 Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template` 01 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-h8vq-8gpg-mhcg
  • Packagist/twig/twig
 Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface` 30 Jun
  • Fix available
GHSA-8x9c-rmqh-456c
  • Packagist/twig/twig
 Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters 30 Jun
  • Fix available
GHSA-5v5v-ww74-355v
  • Packagist/twig/twig
 Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys 30 Jun
  • Fix available
GHSA-p42q-9prx-q5wq
  • Packagist/twig/twig
 Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php` 30 Jun
  • Fix available
GHSA-pr2w-4gpj-cpq4
  • Packagist/twig/twig
 Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points 05 Jun
  • Fix available
GHSA-2g2g-8p8h-fgwm
  • Packagist/twig/twig
 Twig: XSS in profiler HtmlDumper via unescaped template and profile names 05 Jun
  • Fix available
GHSA-2q52-x2ff-qgfr
  • Packagist/twig/twig
 Twig: Possible sandbox bypass when using a source policy 05 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-45vw-wh46-2vx8
  • Packagist/twig/twig
 Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation 21 May
  • Fix available
  • Severity - 8.7 (High)
GHSA-mm6w-gr99-p3jj
  • Packagist/twig/twig
 Twig: Sandbox property and method bypass via object-destructuring assignment 21 May
  • Fix available
  • Severity - 8.7 (High)
GHSA-7fxw-r6jv-74c8
  • Packagist/twig/twig
 Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411) 21 May
  • Fix available
  • Severity - 5.8 (Medium)
GHSA-vcc8-phrv-43wj
  • Packagist/twig/twig
 Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects) 21 May
  • Fix available
  • Severity - 2.1 (Low)
GHSA-24x9-r6q4-q93w
  • Packagist/twig/twig
 Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name 21 May
  • Fix available
GHSA-7p85-w9px-jpjp
  • Packagist/twig/twig
 Twig: PHP code injection via `{% use %}` template name 21 May
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-4j38-f5cw-54h7
  • Packagist/twig/twig
 Twig: The `spaceless` filter implicitly marks its output as safe 21 May
  • Fix available
  • Severity - 1.3 (Low)
GHSA-3xg3-cgvq-2xwr
  • Packagist/twig/twig
 Twig security issue where escaping was missing when using null coalesce operator 29 Jan 2025
  • Fix available
  • Severity - 4.3 (Medium)
Load more...