Skip to content

PatchFirst · Latest vulnerabilities

php-twig vulnerabilities · Page 2

Vulnerabilities published for php-twig in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 21

CVE-2024-45411
High · CVSS 8.6EPSS 0.85%Fix available
Twig has a possible sandbox bypass
Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.
php-twig Operating systems
- Update to 3.8.0-2ubuntu0.1~esm1
Published September 9, 2024Updated September 16, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →