TI-2026-34283 CVE-2026-46628 · GHSA-4j38-f5cw-54h7
Twig: The `spaceless` filter implicitly marks its output as safe
Priority MEDIUM 56
Twig is a template language for PHP.
symfony
Records95All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9
Exploited now
symfony records in CISA KEVNo symfony vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
25 records in Twig · all components
TI-2022-07667 CVE-2022-23614 · GHSA-5mv2-rx3q-4w2v
Code injection in Twig
Priority MEDIUM 54
Twig is an open source template language for PHP.
TI-2018-10028 CVE-2018-13818 · GHSA-rgff-87c8-rh44
Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search search_key…
Priority MEDIUM 52
Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search search_key parameter.
TI-2022-18637 CVE-2022-39261 · GHSA-52m2-vc4m-jj33
Twig may load a template outside a configured directory when using the filesystem loader
Priority MEDIUM 45
Twig is a template language for PHP.
TI-2026-34292 CVE-2026-46640 · GHSA-45vw-wh46-2vx8
Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation
Priority MEDIUM 41
Twig is a template language for PHP.
TI-2026-34285 CVE-2026-46633 · GHSA-7p85-w9px-jpjp
Twig: PHP code injection via `{% use %}` template name
Priority MEDIUM 41
Twig is a template language for PHP.
TI-2026-19691 CVE-2026-24425 · GHSA-2q52-x2ff-qgfr
Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface
Priority MEDIUM 41
Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering capabilities to pass arbitrary PHP callables to sort,…
TI-2024-30460 CVE-2024-45411 · GHSA-6j75-5wfj-gh66
Twig has a possible sandbox bypass
Priority MEDIUM 41
Twig is a template language for PHP.
TI-2026-34286 CVE-2026-46634 · GHSA-24x9-r6q4-q93w
Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name
Priority LOW 37
Twig is a template language for PHP.
TI-2015-06486 CVE-2015-7809 · GHSA-xw83-pwrm-9j74
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox…
Priority LOW 36
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.
TI-2001-01485 CVE-2001-1537 · GHSA-f465-339w-2vhm
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier…
Priority LOW 35
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privil…
TI-2026-36074 CVE-2026-48805 · GHSA-p42q-9prx-q5wq
Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`
Priority LOW 33
Twig is a template language for PHP.
TI-2026-36075 CVE-2026-48806 · GHSA-5v5v-ww74-355v
Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
Priority LOW 32
Twig is a template language for PHP.
Priority LOW 32
Twig is a template language for PHP.
TI-2026-36076 CVE-2026-48807 · GHSA-8x9c-rmqh-456c
Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters
Priority LOW 31
Twig is a template language for PHP.
TI-2026-35233 CVE-2026-47732 · GHSA-pr2w-4gpj-cpq4
Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
Priority LOW 31
Twig is a template language for PHP.
TI-2026-34291 CVE-2026-46639 · GHSA-mm6w-gr99-p3jj
Twig: Sandbox property and method bypass via object-destructuring assignment
Priority LOW 31
Twig is a template language for PHP.
TI-2026-36814 CVE-2026-49981 · GHSA-529h-vh3j-85hq
Protection mechanism failure in symfony Twig
Priority LOW 27
Twig is a template language for PHP.
TI-2026-36077 CVE-2026-48808 · GHSA-h8vq-8gpg-mhcg
Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
Priority LOW 27
Twig is a template language for PHP.
TI-2026-34290 CVE-2026-46638 · GHSA-7fxw-r6jv-74c8
Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)
Priority LOW 27
Twig is a template language for PHP.
TI-2026-34284 CVE-2026-46629 · GHSA-35wc-cvqg-78fp
Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments
Priority LOW 25
Twig is a template language for PHP.
TI-2026-34287 CVE-2026-46635 · GHSA-vcc8-phrv-43wj
Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)
Priority LOW 24
Twig is a template language for PHP.
TI-2026-35231 CVE-2026-47730 · GHSA-2g2g-8p8h-fgwm
Twig: XSS in profiler HtmlDumper via unescaped template and profile names
Priority LOW 23
Twig is a template language for PHP.
TI-2026-34289 CVE-2026-46637 · GHSA-jv8m-2544-3pg3
Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`
Priority LOW 23
Twig is a template language for PHP.
TI-2019-07311 CVE-2019-9942 · GHSA-vxrc-68xx-x48g
A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0…
Priority LOW 20
A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy…