Remote code execution in templates

More info at https://symfony.com/blog/security-release-twig-1-20-0...