Skip to content
OpenAdvisories
Low DLA-4186-1 1 CVE

php-twig - security update

Published May 28, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 php-twig 2.14.3-1+deb11u4

Vulnerabilities 1

  • Low 2.2
    CVE-2024-51754

    Unguarded calls to __toString() when nesting an object into an array in Twig

    Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the security policy when the object is part of an array or an argument list (arguments to a function or a f…

    twigphp Twig php-twig php-twig Debian Ubuntu Packagist