{"action":"Upgrade twig/twig to 3.11.2 or later.","affected":[{"fixed":"3.11.2","introduced":"0"},{"fixed":"3.14.1","introduced":"3.12"}],"component":"twig/twig","cve_ids":["CVE-2024-51755"],"ecosystem":"Packagist","epss":0.00425,"exploited":false,"fixed_versions":["3.11.2","3.14.1"],"ghsa_id":"GHSA-jjxq-ff2g-95vh","id":"tcs_01M5KF4PDAH4Y7M4X1EV8AJV98","modified_at":"2024-11-12T19:45:48.742422Z","published_at":"2024-11-06T19:52:55Z","references":["https://osv.dev/vulnerability/GHSA-jjxq-ff2g-95vh","https://github.com/twigphp/Twig/security/advisories/GHSA-jjxq-ff2g-95vh","https://nvd.nist.gov/vuln/detail/CVE-2024-51755","https://github.com/twigphp/Twig/commit/831c148e786178e5f2fde9db67266be3bf241c21","https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2024-51755.yaml","https://github.com/twigphp/Twig","https://symfony.com/blog/unguarded-calls-to-__isset-and-to-array-accesses-when-the-sandbox-is-enabled"],"severity":{"label":"low","score":2.2},"sources":[{"source":"osv","source_id":"GHSA-jjxq-ff2g-95vh","url":"https://osv.dev/vulnerability/GHSA-jjxq-ff2g-95vh"}],"summary":"Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled"}