pkg:Packagist/twig/twig

All known vulnerabilities

• HIGH8.8CVE-2026-24425Twig: Possible sandbox bypass when using a source policy
  >= 2.16.0, <= 2.16.1
• HIGH8.8CVE-2022-23614php-twig - security update
  >= 2.0.0, < 2.14.11
• HIGH8.5CVE-2024-45411php-twig - security update
  >= 1.0.0, < 1.44.8
• HIGH8.1twig - security update
  from 0, < 1.20.0
• HIGH7.5Twig may load a template outside a configured directory when using the filesystem loader
  >= 1.0.0, < 1.44.7
• MEDIUM4.3Twig security issue where escaping was missing when using null coalesce operator
  >= 3.16.0, < 3.19.0
• LOW3.7twig - security update
  from 0, < 1.38.0
• LOW2.2Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled
  from 0, < 3.11.2
• LOW2.2php-twig - security update
  from 0, < 3.11.2