{"action":"Upgrade twig/twig to 3.11.2 or later.","affected":[{"fixed":"3.11.2","introduced":"0"},{"fixed":"3.14.1","introduced":"3.12"}],"component":"twig/twig","cve_ids":["CVE-2024-51754"],"ecosystem":"Packagist","epss":0.00435,"exploited":false,"fixed_versions":["3.11.2","3.14.1"],"ghsa_id":"GHSA-6377-hfv9-hqf6","id":"tcs_01M5KEWJXT82N4DAANMMSCB5D3","modified_at":"2025-05-29T21:34:35.218736Z","published_at":"2024-11-06T19:52:31Z","references":["https://osv.dev/vulnerability/GHSA-6377-hfv9-hqf6","https://github.com/twigphp/Twig/security/advisories/GHSA-6377-hfv9-hqf6","https://nvd.nist.gov/vuln/detail/CVE-2024-51754","https://github.com/twigphp/Twig/commit/2bb8c2460a2c519c498df9b643d5277117155a73","https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2024-51754.yaml","https://github.com/twigphp/Twig","https://lists.debian.org/debian-lts-announce/2025/05/msg00039.html","https://symfony.com/blog/unguarded-calls-to-__tostring-when-nesting-an-object-into-an-array"],"severity":{"label":"low","score":2.2},"sources":[{"source":"osv","source_id":"GHSA-6377-hfv9-hqf6","url":"https://osv.dev/vulnerability/GHSA-6377-hfv9-hqf6"}],"summary":"Twig has unguarded calls to `__toString()` when nesting an object into an array"}