Vulnerabilities in twigphp
7 resultsCVE-2022-23614HIGHCode injection in TwigEPSS 8.3%CVE-2022-39261HIGHTwig may load a template outside a configured directory when using the filesystem loaderEPSS 1.5%CVE-2024-45411HIGHTwig has a possible sandbox bypassEPSS 0.8%CVE-2026-24425HIGHTwig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterfaceEPSS 0.7%CVE-2024-51754LOWUnguarded calls to __toString() when nesting an object into an array in TwigEPSS 0.4%CVE-2024-51755LOWUnguarded calls to __isset() and to array-accesses when the sandbox is enabled in TwigEPSS 0.4%CVE-2025-24374MEDIUMTwig fixes a security issue where escaping was missing when using null coalesce operator (??)EPSS 0.3%