High
CVE-2026-72698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
High
CVE-2026-49981
Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
Medium
CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
Medium
CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters
Medium
CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
Low
CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`
High
CVE-2026-47732
Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
Low
CVE-2026-47730
Twig: XSS in profiler HtmlDumper via unescaped template and profile names
High
CVE-2026-24425
Twig: Possible sandbox bypass when using a source policy
High
CVE-2026-46640
Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation
High
CVE-2026-46639
Twig: Sandbox property and method bypass via object-destructuring assignment
Medium
CVE-2026-46638
Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)
Low
CVE-2026-46635
Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)
Medium
CVE-2026-46634
Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name
Critical
CVE-2026-46633
Twig: PHP code injection via `{% use %}` template name
Low
CVE-2026-46628
Twig: The `spaceless` filter implicitly marks its output as safe
High
CVE-2026-44738
Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()
Medium
CVE-2025-24374
Twig security issue where escaping was missing when using null coalesce operator
Low
CVE-2024-51755
Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled
Low
CVE-2024-51754
Twig has unguarded calls to `__toString()` when nesting an object into an array
Medium
CVE-2024-45411
Timber <= 1.23.1 - Use of a Vulnerable Dependency
Medium
ghsa-7cvr-xhm5-x998
Twig Path Traversal vulnerability in the filesystem loader
High
CVE-2022-39261
Drupal core - SA-CORE-2022-016
Medium
CVE-2018-5233
Grav CMS Cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.