CVE-2026-5173

🦊 CVE-2026-5173: PoC di Esecuzione Non Autorizzata di Metodi WebSocket in GitLab 🛠️ Panoramica CVE-2026-5173 consente a un utente autenticato con privilegi bassi di chiamare metodi backend ristretti attraverso l'endpoint WebSocket /-/cable di GitLab, in particolare tramite GraphqlChannel...

Unauthorized Method Execution

twig/twig is vulnerable to unauthorized method execution. The vulnerability is due to improper enforcement of security policies in Twig's sandbox environment, which allows the toString method to be called on objects when they are part of arrays or argument lists, even if the method is disallowed ...