Skip to content
OpenAdvisories

Archive

23 March 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.7

    Twig Sandbox Information Disclosure

    A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.