> Search

Critical PHP Injection Vulnerability Patched in Twig Template Engine

A critical vulnerability in Twig versions prior to 3.26.0 allows attackers to inject arbitrary PHP code via crafted template names in {% use %} tags.