Critical DLA-1249-1 1 CVE

smarty3 - security update

Published Jan 19, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	smarty3	3.1.10-2+deb7u2

Vulnerabilities 1

Critical 9.8

CVE-2017-1000480

Smarty PHP code injection

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.

smarty3 smarty/smarty smarty3 Debian Ubuntu Packagist

Jan 3, 2018