Lucene search
+L

4 matches found

Vulnrichment
Vulnrichment
•added 2026/09/04 10:07 p.m.•6 views

CVE-2026-46636 Twig: Sandbox method allowlist bypass via `Markup` subclass

Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...

8.7CVSS5.8AI score0.0057EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/04 10:07 p.m.•47 views

CVE-2026-46636 Twig: Sandbox method allowlist bypass via `Markup` subclass

Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...

8.7CVSS0.0057EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/04 10:07 p.m.•41 views

CVE-2026-46636

Twig , a PHP template language, is affected in versions 1.0.0 through 3.27.0 . The vulnerability stems from SecurityPolicy::checkMethodAllowed() unconditionally whitelisting all method calls on Twig\Markup instances. Because Twig\Markup is not final, subclasses inherit this bypass, exposing every...

8.7CVSS5.3AI score0.0057EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/04 10:07 p.m.•7 views

CVE-2026-46636 Twig: Sandbox method allowlist bypass via `Markup` subclass

Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...

8.7CVSS5.8AI score
SaveExploits0References7
Rows per page
Query Builder