CVE-2026-62996
1 advisory.
Packagist/smarty/smarty CVE-2026-62996: medium, EPSS 0.51%
Smarty Security stream restriction bypass through stream: resource
Action: Upgrade smarty/smarty to 5.8.4 or later.
composer require smarty/smarty:5.8.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.8.4 | - |
Fixed versions
| 5.8.4 |
Sources
- osv: GHSA-rjhh-76wf-8xmw
- https://github.com/smarty-php/smarty/security/advisories/GHSA-rjhh-76wf-8xmw
- https://github.com/smarty-php/smarty/pull/1195
- https://github.com/smarty-php/smarty/commit/3c9f77a2e06ce319ae0092496af32cc8f3adc52e
- https://github.com/smarty-php/smarty
- https://github.com/smarty-php/smarty/releases/tag/v5.8.4
CVE-2026-62996 · published · modified · JSON