Template authors could run restricted static php methods.
Please upgrade to 3.1.40 or higher.
See the documentation on Smarty security features on the static_classes access filter.
If you have any questions or comments about this advisory please open an issue in the Smarty repo
{ "nvd_published_at": "2022-01-10T20:15:00Z", "cwe_ids": [ "CWE-20" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-01-10T22:09:37Z" }