Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/21 9:28 p.m.13 views

GHSA-7FXW-R6JV-74C8 Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

Description The fix for CVE-2024-45411 / GHSA-6j75-5wfj-gh66 added an explicit $loaded-unwrap-checkSecurity call in CoreExtension::include so that a template already cached in Environment::$loadedTemplates is re-checked when included with sandboxed = true. The deprecated but still functional %...

5.8CVSS5.8AI score0.00265EPSS
SaveExploits0References5
Rows per page
Query Builder