cakephp twig-view güvenlik açıkları (CVE)

cakephp twig-view için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
6.9Orta
CVE-2026-59191

TwigView: FileLoader is vulnerable to arbitrary file read

cakephp twig-view

TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate() is supplied un-validated user controlled …

6.9Orta
CVE-2026-59192

TwigView: Deserialization of Untrusted Data

cakephp twig-view

TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, the unserialize filter has no restriction on which classes are allowed.…