TW
Vendor
twigphp
20
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-46636 | TW Twig twigphp | 8.7 | Sep 4 | Twig: Sandbox method allowlist bypass via `Markup` subclass |
| CVE-2026-48807 | TW Twig twigphp | 9.1 | Jul 14 | Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters |
| CVE-2026-48806 | TW Twig twigphp | 9.1 | Jul 14 | Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys |
| CVE-2026-48808 | TW Twig twigphp | 7.5 | Jul 14 | Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface` |
| CVE-2026-48805 | TW Twig twigphp | 9.1 | Jul 14 | Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php` |
| CVE-2026-49981 | TW Twig twigphp | 8.2 | Jul 14 | Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template` |
| CVE-2026-46637 | TW Twig twigphp | 5.4 | Jul 14 | Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']` |
| CVE-2026-46638 | TW Twig twigphp | 8.1 | Jul 14 | Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411) |
| CVE-2026-46640 | TW Twig twigphp | 8.8 | Jul 14 | Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation |
| CVE-2026-46629 | TW Twig twigphp | 6.5 | Jul 14 | Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments |
| CVE-2026-47730 | TW Twig twigphp | 5.4 | Jul 14 | Twig: XSS in profiler HtmlDumper via unescaped template and profile names |
| CVE-2026-46628 | TW Twig twigphp | 5.4 | Jul 14 | Twig: The `spaceless` filter implicitly marks its output as safe |
| CVE-2026-46634 | TW Twig twigphp | 9.8 | Jul 14 | Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name |
| CVE-2026-46627 | TW Twig twigphp | 6.5 | Jul 14 | Twig: Sandbox resource exhaustion via unbounded `for` / `range()` |
| CVE-2026-46633 | TW Twig twigphp | 9.8 | Jul 14 | Twig: PHP code injection via `{% use %}` template name |
| CVE-2026-46639 | TW Twig twigphp | 6.5 | Jul 14 | Twig: Sandbox property and method bypass via object-destructuring assignment |
| CVE-2026-46635 | TW Twig twigphp | 4.3 | Jul 14 | Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects) |
| CVE-2026-47732 | TW Twig twigphp | 6.5 | Jul 14 | Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points |
| CVE-2026-24425 | TW Twig twigphp | 9.9 | May 20 | Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface |
| CVE-2024-45411 | TW Twig twigphp | 8.6 | Sep 9 | Twig has a possible sandbox bypass |