twig vulnerabilities (Ubuntu)
8 vulnerabilities.
-
twigUbuntu Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template` 6.0 Medium -
twigUbuntu Twig fixes a security issue where escaping was missing when using null coalesce operator (??) 4.3 Medium -
twigUbuntu Unguarded calls to __toString() when nesting an object into an array in Twig 2.2 Low -
twigUbuntu Unguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twig 2.2 Low -
twigUbuntu Twig has a possible sandbox bypass 8.6 High -
twigUbuntu Twig may load a template outside a configured directory when using the filesystem loader 7.5 High -
twigUbuntu Code injection in Twig 8.8 High -
twigUbuntu Twig Sandbox Information Disclosure 3.7 Low