Skip to content
OpenAdvisories

Package · Packagist

latte/latte

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2022-21648

    Sandbox bypass in Latte templates

    Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a sandbox escape exists allowing for injection into web pages generated from Latte. This may lead to XS…

    nette latte php-nette latte/latte Ubuntu Packagist
  • Critical 9.8
    CVE-2021-23803

    Access Control Bypass

    This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template is set to allow/disallow the use of certain functions, adding control characters (x00-x08) after th…

    php-nette latte/latte Ubuntu Packagist