CVE-2026-62992
1 advisory.
Packagist/smarty/smarty CVE-2026-62992: medium, EPSS 0.53%
Smarty: Symlink path traversal out of trusted directories
Action: Upgrade smarty/smarty to 4.5.7 or later.
composer require smarty/smarty:5.8.2composer require smarty/smarty:4.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.8.2 | - |
| 0 | 4.5.7 | - |
Fixed versions
| 5.8.2 | 4.5.7 |
Sources
- osv: GHSA-f6wf-28g6-769x
- https://github.com/smarty-php/smarty/security/advisories/GHSA-f6wf-28g6-769x
- https://github.com/smarty-php/smarty/commit/99c048ce7a590c519b79fbd38ad0143a08183a1f
- https://github.com/smarty-php/smarty/commit/a1ccdb0518021a559b4066c37b76a42c86bbce90
- https://github.com/smarty-php/smarty
- https://github.com/smarty-php/smarty/releases/tag/v4.5.7
- https://github.com/smarty-php/smarty/releases/tag/v5.8.2
CVE-2026-62992 · published · modified · JSON