cakephp twig-view vulnerabilities (CVE)

CVE records published for cakephp twig-view, newest first. Follow to get an email when a new one appears.

2 results
6.9Medium
CVE-2026-59191

TwigView: FileLoader is vulnerable to arbitrary file read

cakephp twig-view

TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate() is supplied un-validated user controlled …

6.9Medium
CVE-2026-59192

TwigView: Deserialization of Untrusted Data

cakephp twig-view

TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, the unserialize filter has no restriction on which classes are allowed.…