CVE-2022-21648
1 advisory.
Packagist/latte/latte CVE-2022-21648: high 8.2, EPSS 0.82%
Sandbox bypass in Latte templates
Action: Upgrade latte/latte to 2.8.8 or later.
composer require latte/latte:2.10.8composer require latte/latte:2.9.6composer require latte/latte:2.8.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.0 | 2.10.8 | - |
| 2.9.0 | 2.9.6 | - |
| 2.8.0 | 2.8.8 | - |
Fixed versions
| 2.10.8 | 2.9.6 | 2.8.8 |
Sources
- osv: GHSA-36m2-8rhx-f36j
- https://github.com/nette/latte/security/advisories/GHSA-36m2-8rhx-f36j
- https://nvd.nist.gov/vuln/detail/CVE-2022-21648
- https://github.com/nette/latte/commit/9e1b4f7d70f7a9c3fa6753ffa7d7e450a3d4abb0
- https://github.com/nette/latte
CVE-2022-21648 · published · modified · JSON