tocsin

Debian/php-twig: medium 6.5

Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::getAttribute() with the sandbox argument hardcoded to false, disabling property a

Action: Upgrade php-twig to 3.26.0-1 or later.

Affected

introducedfixedlast affected
03.26.0-1-

Fixed versions

3.26.0-1

Sources

published · modified · JSON