Vulnerabilidades de cakephp twig-view (CVE)

Registros CVE publicados para cakephp twig-view, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
6.9Media
CVE-2026-59191

TwigView: FileLoader is vulnerable to arbitrary file read

cakephp twig-view

TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate() is supplied un-validated user controlled …

6.9Media
CVE-2026-59192

TwigView: Deserialization of Untrusted Data

cakephp twig-view

TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, the unserialize filter has no restriction on which classes are allowed.…