Beveiligingsadvies

CVE-2026-46634

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-14 21:19:17

Laatst bijgewerkt 2026-07-29 18:26:17

Toegewezen door GitHub_M

CVSS-score 7.7

Status PUBLISHED

Beschrijving

Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a synthesized __string_template__<hash> name that can fall outside a SourcePolicyInterface sandbox decision, allowing a sandboxed template that can call template_from_string and include to render an inner template without security policy enforcement. This issue is fixed in version 3.26.0.

← Alle CVE's bekijken Bekijk op cve.org ↗