Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

symfony/twig-bridge

2 known vulnerabilities (1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium, 1 low
Registry
Packagist

Advisories 2

  • Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering

    Affected: from 6.4.24, fixed in 6.4.40.

  • CVE-2023-46734Medium 6.1

    Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

    Affected: from 2.0.0, fixed in 4.4.51; from 5.0.0, fixed in 5.4.31; from 6.0.0, fixed in 6.3.8.