Skip to content
OpenAdvisories
High DSA-5248-1 1 CVE

php-twig - security update

Published Oct 5, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 php-twig 2.14.3-1+deb11u2

Vulnerabilities 1

  • High 7.5
    CVE-2022-39261

    Twig may load a template outside a configured directory when using the filesystem loader

    Twig is a template language for PHP. Versions 1.x prior to 1.44.7, 2.x prior to 2.15.3, and 3.x prior to 3.4.3 encounter an issue when the filesystem loader loads templates for which the name is a user input. It is possible to use the `source` or `include` st…

    twigphp Twig drupal/core php-twig Debian Ubuntu Packagist