{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.0"}],"component":"drupal-pattern-lab/unified-twig-extensions","cve_ids":["CVE-2025-11570"],"ecosystem":"Packagist","epss":0.00216,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-64mv-9655-37hx","id":"tcs_01M5KEWMBCAAECJAZFPMGYZ4H2","modified_at":"2025-10-11T00:12:31.431371Z","published_at":"2025-10-10T06:30:55Z","references":["https://osv.dev/vulnerability/GHSA-64mv-9655-37hx","https://nvd.nist.gov/vuln/detail/CVE-2025-11570","https://github.com/drupal-pattern-lab/unified-twig-extensions","https://github.com/drupal-pattern-lab/unified-twig-extensions/blob/862b9deccab544ca68e3aaaccc257d14acc9b1f6/example/_twig-components/functions/link.function.php%23L9","https://security.snyk.io/vuln/SNYK-PHP-DRUPALPATTERNLABUNIFIEDTWIGEXTENSIONS-8400877","https://www.drupal.org/project/unified_twig_ext","https://www.drupal.org/sa-contrib-2023-041"],"severity":{"label":"medium","score":4.6},"sources":[{"source":"osv","source_id":"GHSA-64mv-9655-37hx","url":"https://osv.dev/vulnerability/GHSA-64mv-9655-37hx"},{"source":"nvd","source_id":"CVE-2025-11570","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11570"}],"summary":"drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS"}