Packagist/drupal/core CVE-2022-39261: unknown, EPSS 3.17%
Drupal uses the [Twig](https://twig.symfony.com/) third-party library for content templating and sanitization. [Twig has released a security update](https://symfony.com/blog/twig-security-release-poss
Action: Upgrade drupal/core to 9.3.22 or later.
composer require drupal/core:9.3.22composer require drupal/core:9.4.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 9.3.22 | - |
| 9.4.0 | 9.4.7 | - |
Fixed versions
| 9.3.22 | 9.4.7 |
Sources
CVE-2022-39261 · published · modified · JSON