Markdown Extra
Approved changes feed: RSS · Atom
cpe:2.3:a:twig:markdown-extra:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Twig (5b8a1a8f-7318-5cc8-a825-98c41558db8f) |
|---|---|
| Product | Markdown Extra (98ca667e-6c5d-5c3c-b9b2-477d0e0333f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46637 |
vulnerable | 2026-07-29 00:54:59.106104 |
Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`
Twig is a template language for PHP. Prior to 3.26.0, several filters in twig/markdown-extra and twig/cssinliner-extra are registered with is_safe => [all], causing Twig to treat plain text or HTML output as safe in HTML, JavaScript, CSS, URL, and other contexts where the output is not properly escaped. This issue is fixed in version 3.26.0.
Published: 2026-07-14T21:25:20.141Z
Updated: 2026-07-16T15:05:57.087Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.