{"action":"Upgrade twig/twig to 1.12.3 or later.","affected":[{"fixed":"1.12.3","introduced":"1.0.0"}],"component":"twig/twig","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.12.3"],"ghsa_id":"GHSA-7cvr-xhm5-x998","id":"tcs_01M5KEXYZ24WFGQ592G06NEKBB","modified_at":"2024-12-05T05:41:41.920078Z","published_at":"2024-05-30T13:42:49Z","references":["https://osv.dev/vulnerability/GHSA-7cvr-xhm5-x998","https://github.com/fabpot/Twig/commit/3d19a2eed53570776af313593aaeb5ad62cf4980.diff","https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/2013-04-08.yaml","https://github.com/twigphp/Twig","https://web.archive.org/web/20130511111630/http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig-1-12-3-released"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-7cvr-xhm5-x998","url":"https://osv.dev/vulnerability/GHSA-7cvr-xhm5-x998"}],"summary":"Twig Path Traversal vulnerability in the filesystem loader"}