Approved changes feed: RSS · Atom
cpe:2.3:a:symfony:twig:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Symfony (88011d02-04e0-53e8-bc79-472f99951c29) |
|---|---|
| Product | Twig (edc61d8b-c9b7-5498-9b2c-a62bdc212195) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/twig |
purl2cpe | 2026-06-01 10:16:41.557834 |
pkg:deb/ubuntu/twig |
purl2cpe | 2026-06-01 10:16:41.557837 |
pkg:github/twigphp/twig |
purl2cpe | 2026-06-01 10:16:41.557838 |
pkg:nuget/twig.twig |
purl2cpe | 2026-06-01 10:16:41.557840 |
pkg:rpm/fedora/php-twig |
purl2cpe | 2026-06-01 10:16:41.557842 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-49981 |
vulnerable | 2026-07-29 00:57:45.807191 |
Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can remain cached after sandbox state changes between renders, allowing a later sandboxed render to reuse a template that was originally checked with a different or empty policy. This issue is fixed in version 3.27.0.
Published: 2026-07-14T21:26:00.460Z
Updated: 2026-07-21T14:57:52.032Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47730 |
vulnerable | 2026-07-29 00:55:00.372709 |
Twig: XSS in profiler HtmlDumper via unescaped template and profile names
Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate() and Profile::getName() into HTML output without escaping, allowing attacker-controlled template or profile names to inject arbitrary HTML when a browser renders the profiler dump. This issue is fixed in version 3.26.0.
Published: 2026-07-14T21:21:10.185Z
Updated: 2026-07-21T14:45:11.407Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46637 |
vulnerable | 2026-07-29 00:54:59.106179 |
Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`
Twig is a template language for PHP. Prior to 3.26.0, several filters in twig/markdown-extra and twig/cssinliner-extra are registered with is_safe => [all], causing Twig to treat plain text or HTML output as safe in HTML, JavaScript, CSS, URL, and other contexts where the output is not properly escaped. This issue is fixed in version 3.26.0.
Published: 2026-07-14T21:25:20.141Z
Updated: 2026-07-16T15:05:57.087Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46634 |
vulnerable | 2026-07-29 00:54:59.095675 |
Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name
Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a synthesized __string_template__<hash> name that can fall outside a SourcePolicyInterface sandbox decision, allowing a sandboxed template that can call template_from_string and include to render an inner template without security policy enforcement. This issue is fixed in version 3.26.0.
Published: 2026-07-14T21:19:17.804Z
Updated: 2026-07-29T18:26:17.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46627 |
vulnerable | 2026-07-29 00:54:59.094553 |
Twig: Sandbox resource exhaustion via unbounded `for` / `range()`
Twig is a template language for PHP. Prior to 3.26.0, the Twig sandbox does not prevent a template from consuming CPU, memory, or wall-clock time, even under the strictest allow-list, allowing untrusted templates to cause resource exhaustion. This issue is addressed in version 3.26.0 by documenting that the sandbox does not protect against resource exhaustion.
Published: 2026-07-14T21:15:17.366Z
Updated: 2026-07-16T15:03:37.558Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45411 |
vulnerable | 2026-06-08 06:48:06.092281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39261 |
vulnerable | 2026-06-08 05:47:18.458444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23614 |
vulnerable | 2026-06-08 05:40:58.042164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9942 |
vulnerable | 2026-06-08 05:14:26.628418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13818 |
vulnerable | 2026-06-08 05:10:51.993111 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7809 |
vulnerable | 2026-06-08 05:07:01.987180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-1537 |
vulnerable | 2026-06-08 04:46:20.236268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.