{"action":"Upgrade twig/twig to 1.38.0 or later.","affected":[{"fixed":"1.38.0","introduced":"0"},{"fixed":"2.7.0","introduced":"2.0.0"}],"component":"twig/twig","cve_ids":["CVE-2019-9942"],"ecosystem":"Packagist","epss":0.01405,"exploited":false,"fixed_versions":["1.38.0","2.7.0"],"ghsa_id":"GHSA-vxrc-68xx-x48g","id":"tcs_01M5KF9K5PADWY9PYD0H1A6ZQK","modified_at":"2024-02-16T08:12:09.652191Z","published_at":"2022-03-26T00:25:25Z","references":["https://osv.dev/vulnerability/GHSA-vxrc-68xx-x48g","https://nvd.nist.gov/vuln/detail/CVE-2019-9942","https://github.com/twigphp/Twig/commit/eac5422956e1dcca89a3669a03a3ff32f0502077","https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2019-9942.yaml","https://github.com/twigphp/Twig","https://seclists.org/bugtraq/2019/Mar/60","https://symfony.com/blog/twig-sandbox-information-disclosure","https://www.debian.org/security/2019/dsa-4419"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-vxrc-68xx-x48g","url":"https://osv.dev/vulnerability/GHSA-vxrc-68xx-x48g"}],"summary":"Twig Sandbox Information Disclosure"}