php-twig vulnerabilities (Ubuntu)
25 vulnerabilities.
-
php-twigUbuntu Twig: Sandbox method allowlist bypass via `Markup` subclass 8.7 High -
php-twigUbuntu Twig: Sandbox resource exhaustion via unbounded `for` / `range()` 7.1 High -
php-twigUbuntu Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template` 6.0 Medium -
php-twigUbuntu Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface` 6.0 Medium -
php-twigUbuntu Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters 7.1 High -
php-twigUbuntu Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys 7.1 High -
php-twigUbuntu Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php` 5.3 Medium -
php-twigUbuntu Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points 7.1 High -
php-twigUbuntu Twig: XSS in profiler HtmlDumper via unescaped template and profile names 5.1 Medium -
php-twigUbuntu Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation 8.7 High -
php-twigUbuntu Twig: Sandbox property and method bypass via object-destructuring assignment 7.1 High -
php-twigUbuntu Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411) 6.0 Medium -
php-twigUbuntu Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']` 5.1 Medium -
php-twigUbuntu Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects) 5.3 Medium -
php-twigUbuntu Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name 7.7 High -
php-twigUbuntu Twig: PHP code injection via `{% use %}` template name 8.7 High -
php-twigUbuntu Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments 5.3 Medium -
php-twigUbuntu Twig: The `spaceless` filter implicitly marks its output as safe 5.1 Medium -
php-twigUbuntu Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface 8.7 High -
php-twigUbuntu Unguarded calls to __toString() when nesting an object into an array in Twig 2.2 Low -
php-twigUbuntu Unguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twig 2.2 Low -
php-twigUbuntu Twig has a possible sandbox bypass 8.6 High -
php-twigUbuntu Twig may load a template outside a configured directory when using the filesystem loader 7.5 High -
php-twigUbuntu Code injection in Twig 8.8 High -
php-twigUbuntu Twig Sandbox Information Disclosure 3.7 Low