Packagist/drupal-pattern-lab/unified-twig-extensions CVE-2025-11570: medium 4.6, EPSS 0.22%
drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-64mv-9655-37hx
- nvd: CVE-2025-11570
- https://github.com/drupal-pattern-lab/unified-twig-extensions
- https://github.com/drupal-pattern-lab/unified-twig-extensions/blob/862b9deccab544ca68e3aaaccc257d14acc9b1f6/example/_twig-components/functions/link.function.php%23L9
- https://security.snyk.io/vuln/SNYK-PHP-DRUPALPATTERNLABUNIFIEDTWIGEXTENSIONS-8400877
- https://www.drupal.org/project/unified_twig_ext
- https://www.drupal.org/sa-contrib-2023-041
CVE-2025-11570 · published · modified · JSON