CVE-2019-9942
1 advisory.
Packagist/twig/twig CVE-2019-9942: low 3.7
Twig Sandbox Information Disclosure
Action: Upgrade twig/twig to 1.38.0 or later.
composer require twig/twig:1.38.0composer require twig/twig:2.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.38.0 | - |
| 2.0.0 | 2.7.0 | - |
Fixed versions
| 1.38.0 | 2.7.0 |
Sources
- osv: GHSA-vxrc-68xx-x48g
- https://nvd.nist.gov/vuln/detail/CVE-2019-9942
- https://github.com/twigphp/Twig/commit/eac5422956e1dcca89a3669a03a3ff32f0502077
- https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2019-9942.yaml
- https://github.com/twigphp/Twig
- https://seclists.org/bugtraq/2019/Mar/60
- https://symfony.com/blog/twig-sandbox-information-disclosure
- https://www.debian.org/security/2019/dsa-4419
CVE-2019-9942 · published · modified · JSON