Vulnerabilities in twigphp
25 resultsCVE-2026-46635MEDIUMTwig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)EPSS 0.3%CVE-2026-46637MEDIUMTwig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`EPSS 0.3%CVE-2026-47730MEDIUMTwig: XSS in profiler HtmlDumper via unescaped template and profile namesEPSS 0.3%CVE-2026-46628MEDIUMTwig: The `spaceless` filter implicitly marks its output as safeEPSS 0.3%CVE-2025-24374MEDIUMTwig fixes a security issue where escaping was missing when using null coalesce operator (??)EPSS 0.3%