GHSA-P42Q-9PRX-Q5WQ Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

Description The 3.26.0 source-policy hardening changed the signature of CoreExtension::checkArrow to take a boolean $isSandboxed instead of an Environment, and added the same $isSandboxed argument to CoreExtension::arraySome and CoreExtension::arrayEvery. Compiled templates were updated to pass t...

MAL-2025-32130 Malicious code in resolve-sandbox-export-daemon-gamma (npm)

The package resolve-sandbox-export-daemon-gamma was found to contain malicious code...

Malicious code in resolve-sandbox-export-daemon-gamma (npm)

The package resolve-sandbox-export-daemon-gamma was found to contain malicious code...