Skip to content
OpenAdvisories
High DSA-5107-1 1 CVE

php-twig - security update

Published Mar 24, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 php-twig 2.14.3-1+deb11u1

Vulnerabilities 1

  • High 8.8
    CVE-2022-23614 Public exploit

    Code injection in Twig

    Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced…

    twigphp Twig php-twig php-twig Debian Ubuntu Packagist