Skip to content
OpenAdvisories

Package · Ubuntu

smarty4

5 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-82531 Public exploit

    Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache

    Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-component template inheritance, leaving it null. Attackers can supply assigned data containing a forged S…