Packagist/twig/twig: medium 5.3
Twig Path Traversal vulnerability in the filesystem loader
Action: Upgrade twig/twig to 1.12.3 or later.
composer require twig/twig:1.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.12.3 | - |
Fixed versions
| 1.12.3 |
Sources
- osv: GHSA-7cvr-xhm5-x998
- https://github.com/fabpot/Twig/commit/3d19a2eed53570776af313593aaeb5ad62cf4980.diff
- https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/2013-04-08.yaml
- https://github.com/twigphp/Twig
- https://web.archive.org/web/20130511111630/http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig-1-12-3-released
published · modified · JSON