Skip to content
OpenAdvisories
High DLA-3888-1 1 CVE

php-twig - security update

Published Sep 16, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 php-twig 2.14.3-1+deb11u3

Vulnerabilities 1

  • High 8.6
    CVE-2024-45411

    Twig has a possible sandbox bypass

    Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.

    twigphp Twig php-twig php-twig Debian Ubuntu Packagist