Количество 4
Количество 4
CVE-2026-48808
Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::checkPropertyAllowed(), so SourcePolicyInterface decisions are lost and a template author can read public or magic properties not allowed by the sandbox policy. This issue is fixed in version 3.27.0.
CVE-2026-48808
Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::checkPropertyAllowed(), so SourcePolicyInterface decisions are lost and a template author can read public or magic properties not allowed by the sandbox policy. This issue is fixed in version 3.27.0.
CVE-2026-48808
Twig is a template language for PHP. Prior to 3.27.0, the column filte ...
GHSA-h8vq-8gpg-mhcg
Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-48808 Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::checkPropertyAllowed(), so SourcePolicyInterface decisions are lost and a template author can read public or magic properties not allowed by the sandbox policy. This issue is fixed in version 3.27.0. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-48808 Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::checkPropertyAllowed(), so SourcePolicyInterface decisions are lost and a template author can read public or magic properties not allowed by the sandbox policy. This issue is fixed in version 3.27.0. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
| CVE-2026-48808 Twig is a template language for PHP. Prior to 3.27.0, the column filte ... | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
| GHSA-h8vq-8gpg-mhcg Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface` | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу