Skip to content
OpenAdvisories
High DSA-5771-1 1 CVE

php-twig - security update

Published Sep 17, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 php-twig 3.5.1-1+deb12u1

Vulnerabilities 1

  • High 8.6
    CVE-2024-45411

    Twig has a possible sandbox bypass

    Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.

    twigphp Twig php-twig php-twig Debian Ubuntu Packagist