CVE-2025-24374

Publication date

2025-01-29 15:22:34

Family

GitHub_M

State

PUBLISHED

Description

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0.