Skip to content
OpenAdvisories

Package · Packagist

latte/latte

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2022-21648

    Sandbox bypass in Latte templates

    Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a sandbox escape exists allowing for injection into web pages generated from Latte. This may lead to XS…

    nette latte php-nette latte/latte Ubuntu Packagist