CVE-2026-59191

The TwigView plugin for CakePHP is vulnerable to arbitrary file read due to a lack of input validation in the FileLoader::findTemplate() function. An attacker supplying un-validated, user-controlled data to this function can read files from the system. This vulnerability affects versions prior to...