Skip to content
OpenAdvisories

Vendor

twigphp

25 known vulnerabilities.

Products

Twig 25
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-23614 Public exploit

    Code injection in Twig

    Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced…

    twigphp Twig php-twig php-twig Debian Ubuntu Packagist