Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-yypq-j9mx-6qa4

Summary

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Twig is an open source template language for PHP.Patched versions now disallow calling non Closure in the `sort` filter as is the case for some other filters. Users are advised to upgrade.

Aliases

alias	CVE-2022-23614

alias	GHSA-5mv2-rx3q-4w2v

Fixed_packages

url pkg:composer/twig/twig@2.14.11

purl pkg:composer/twig/twig@2.14.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.11

url pkg:composer/twig/twig@3.0.0-BETA1

purl pkg:composer/twig/twig@3.0.0-BETA1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.0-BETA1

url pkg:composer/twig/twig@3.3.8

purl pkg:composer/twig/twig@3.3.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.8

url	pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u1?distro=trixie
purl	pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@2.14.3-1%252Bdeb11u1%3Fdistro=trixie

url pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u2?distro=trixie

purl pkg:deb/debian/php-twig@2.14.3-1%2Bdeb11u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2mrj-u2wu-wkhv

vulnerability	VCID-cd24-q2ys-yfbe

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@2.14.3-1%252Bdeb11u2%3Fdistro=trixie

url	pkg:deb/debian/php-twig@3.3.8-1?distro=trixie
purl	pkg:deb/debian/php-twig@3.3.8-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.3.8-1%3Fdistro=trixie

url pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u1?distro=trixie

purl pkg:deb/debian/php-twig@3.5.1-1%2Bdeb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-2mrj-u2wu-wkhv

vulnerability	VCID-cd24-q2ys-yfbe

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.5.1-1%252Bdeb12u1%3Fdistro=trixie

url	pkg:deb/debian/php-twig@3.20.0-2?distro=trixie
purl	pkg:deb/debian/php-twig@3.20.0-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.20.0-2%3Fdistro=trixie

url	pkg:deb/debian/php-twig@3.24.0-1?distro=trixie
purl	pkg:deb/debian/php-twig@3.24.0-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-twig@3.24.0-1%3Fdistro=trixie

Affected_packages

url pkg:composer/twig/twig@2.0.0

purl pkg:composer/twig/twig@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.0.0

url pkg:composer/twig/twig@2.1.0

purl pkg:composer/twig/twig@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.1.0

url pkg:composer/twig/twig@2.2.0

purl pkg:composer/twig/twig@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.2.0

url pkg:composer/twig/twig@2.3.0

purl pkg:composer/twig/twig@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.3.0

url pkg:composer/twig/twig@2.3.1

purl pkg:composer/twig/twig@2.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.3.1

url pkg:composer/twig/twig@2.3.2

purl pkg:composer/twig/twig@2.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.3.2

url pkg:composer/twig/twig@2.4.0

purl pkg:composer/twig/twig@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.0

url pkg:composer/twig/twig@2.4.1

purl pkg:composer/twig/twig@2.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.1

url pkg:composer/twig/twig@2.4.2

purl pkg:composer/twig/twig@2.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.2

url pkg:composer/twig/twig@2.4.3

purl pkg:composer/twig/twig@2.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.3

url pkg:composer/twig/twig@2.4.4

purl pkg:composer/twig/twig@2.4.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.4

url pkg:composer/twig/twig@2.4.5

purl pkg:composer/twig/twig@2.4.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.5

url pkg:composer/twig/twig@2.4.6

purl pkg:composer/twig/twig@2.4.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.6

url pkg:composer/twig/twig@2.4.7

purl pkg:composer/twig/twig@2.4.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.7

url pkg:composer/twig/twig@2.4.8

purl pkg:composer/twig/twig@2.4.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.4.8

url pkg:composer/twig/twig@2.5.0

purl pkg:composer/twig/twig@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.5.0

url pkg:composer/twig/twig@2.6.0

purl pkg:composer/twig/twig@2.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.6.0

url pkg:composer/twig/twig@2.6.1

purl pkg:composer/twig/twig@2.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.6.1

url pkg:composer/twig/twig@2.6.2

purl pkg:composer/twig/twig@2.6.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-xe7j-b1cs-eqct

vulnerability	VCID-xscd-caaj-kqdk

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.6.2

url pkg:composer/twig/twig@2.7.0

purl pkg:composer/twig/twig@2.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.7.0

url pkg:composer/twig/twig@2.7.1

purl pkg:composer/twig/twig@2.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.7.1

url pkg:composer/twig/twig@2.7.2

purl pkg:composer/twig/twig@2.7.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.7.2

url pkg:composer/twig/twig@2.7.3

purl pkg:composer/twig/twig@2.7.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.7.3

url pkg:composer/twig/twig@2.7.4

purl pkg:composer/twig/twig@2.7.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.7.4

url pkg:composer/twig/twig@2.8.0

purl pkg:composer/twig/twig@2.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.8.0

url pkg:composer/twig/twig@2.8.1

purl pkg:composer/twig/twig@2.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.8.1

url pkg:composer/twig/twig@2.9.0

purl pkg:composer/twig/twig@2.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.9.0

url pkg:composer/twig/twig@2.10.0

purl pkg:composer/twig/twig@2.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.10.0

url pkg:composer/twig/twig@2.11.0

purl pkg:composer/twig/twig@2.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.11.0

url pkg:composer/twig/twig@2.11.1

purl pkg:composer/twig/twig@2.11.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.11.1

url pkg:composer/twig/twig@2.11.2

purl pkg:composer/twig/twig@2.11.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.11.2

url pkg:composer/twig/twig@2.11.3

purl pkg:composer/twig/twig@2.11.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.11.3

url pkg:composer/twig/twig@2.12.0

purl pkg:composer/twig/twig@2.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.12.0

url pkg:composer/twig/twig@2.12.1

purl pkg:composer/twig/twig@2.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.12.1

url pkg:composer/twig/twig@2.12.2

purl pkg:composer/twig/twig@2.12.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.12.2

url pkg:composer/twig/twig@2.12.3

purl pkg:composer/twig/twig@2.12.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.12.3

url pkg:composer/twig/twig@2.12.4

purl pkg:composer/twig/twig@2.12.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.12.4

url pkg:composer/twig/twig@2.12.5

purl pkg:composer/twig/twig@2.12.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.12.5

url pkg:composer/twig/twig@2.13.0

purl pkg:composer/twig/twig@2.13.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.13.0

url pkg:composer/twig/twig@2.13.1

purl pkg:composer/twig/twig@2.13.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.13.1

url pkg:composer/twig/twig@2.14.0

purl pkg:composer/twig/twig@2.14.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.0

url pkg:composer/twig/twig@2.14.1

purl pkg:composer/twig/twig@2.14.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.1

url pkg:composer/twig/twig@2.14.2

purl pkg:composer/twig/twig@2.14.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.2

url pkg:composer/twig/twig@2.14.3

purl pkg:composer/twig/twig@2.14.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.3

url pkg:composer/twig/twig@2.14.4

purl pkg:composer/twig/twig@2.14.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.4

url pkg:composer/twig/twig@2.14.5

purl pkg:composer/twig/twig@2.14.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.5

url pkg:composer/twig/twig@2.14.6

purl pkg:composer/twig/twig@2.14.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.6

url pkg:composer/twig/twig@2.14.7

purl pkg:composer/twig/twig@2.14.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.7

url pkg:composer/twig/twig@2.14.8

purl pkg:composer/twig/twig@2.14.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.8

url pkg:composer/twig/twig@2.14.9

purl pkg:composer/twig/twig@2.14.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.9

url pkg:composer/twig/twig@2.14.10

purl pkg:composer/twig/twig@2.14.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@2.14.10

url pkg:composer/twig/twig@3.0.0

purl pkg:composer/twig/twig@3.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.0

url pkg:composer/twig/twig@3.0.1

purl pkg:composer/twig/twig@3.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.1

url pkg:composer/twig/twig@3.0.2

purl pkg:composer/twig/twig@3.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.2

url pkg:composer/twig/twig@3.0.3

purl pkg:composer/twig/twig@3.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.3

url pkg:composer/twig/twig@3.0.4

purl pkg:composer/twig/twig@3.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.4

url pkg:composer/twig/twig@3.0.5

purl pkg:composer/twig/twig@3.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.0.5

url pkg:composer/twig/twig@3.1.0

purl pkg:composer/twig/twig@3.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.1.0

url pkg:composer/twig/twig@3.1.1

purl pkg:composer/twig/twig@3.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.1.1

url pkg:composer/twig/twig@3.2.1

purl pkg:composer/twig/twig@3.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.2.1

url pkg:composer/twig/twig@3.3.0

purl pkg:composer/twig/twig@3.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.0

url pkg:composer/twig/twig@3.3.1

purl pkg:composer/twig/twig@3.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.1

url pkg:composer/twig/twig@3.3.2

purl pkg:composer/twig/twig@3.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.2

url pkg:composer/twig/twig@3.3.3

purl pkg:composer/twig/twig@3.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.3

url pkg:composer/twig/twig@3.3.4

purl pkg:composer/twig/twig@3.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.4

url pkg:composer/twig/twig@3.3.5

purl pkg:composer/twig/twig@3.3.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.5

url pkg:composer/twig/twig@3.3.6

purl pkg:composer/twig/twig@3.3.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.6

url pkg:composer/twig/twig@3.3.7

purl pkg:composer/twig/twig@3.3.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1au7-86r7-8qdn

vulnerability	VCID-cd24-q2ys-yfbe

vulnerability	VCID-etje-vrfw-nbh4

vulnerability	VCID-ummk-h11z-bkaj

vulnerability	VCID-yypq-j9mx-6qa4

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twig/twig@3.3.7

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23614.json

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23614.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2022-23614

reference_id

reference_type

scores

value	0.27829
scoring_system	epss
scoring_elements	0.96469
published_at	2026-04-18T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96465
published_at	2026-04-16T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96458
published_at	2026-04-13T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96455
published_at	2026-04-12T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96447
published_at	2026-04-08T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96451
published_at	2026-04-09T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96439
published_at	2026-04-07T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96436
published_at	2026-04-04T12:55:00Z

value	0.27829
scoring_system	epss
scoring_elements	0.96431
published_at	2026-04-02T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2022-23614

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23614
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23614

reference_url

https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2022-23614.yaml

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2022-23614.yaml

reference_url

https://github.com/twigphp/Twig

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/twigphp/Twig

reference_url

https://github.com/twigphp/Twig/commit/22b9dc3c03ee66d7e21d9ed2ca76052b134cb9e9

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://github.com/twigphp/Twig/commit/22b9dc3c03ee66d7e21d9ed2ca76052b134cb9e9

reference_url

https://github.com/twigphp/Twig/commit/2eb33080558611201b55079d07ac88f207b466d5

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://github.com/twigphp/Twig/commit/2eb33080558611201b55079d07ac88f207b466d5

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTN4273U4RHVIXED64T7DSMJ3VYTPRE7

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTN4273U4RHVIXED64T7DSMJ3VYTPRE7

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTN4273U4RHVIXED64T7DSMJ3VYTPRE7/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTN4273U4RHVIXED64T7DSMJ3VYTPRE7/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD/

reference_url

https://symfony.com/blog/twig-security-release-disallow-non-closures-in-the-sort-filter

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://symfony.com/blog/twig-security-release-disallow-non-closures-in-the-sort-filter

reference_url

https://www.debian.org/security/2022/dsa-5107

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://www.debian.org/security/2022/dsa-5107

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2051361
reference_id	2051361
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2051361

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2022-23614

reference_id

CVE-2022-23614

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2022-23614

reference_url

https://github.com/advisories/GHSA-5mv2-rx3q-4w2v

reference_id

GHSA-5mv2-rx3q-4w2v

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-5mv2-rx3q-4w2v

reference_url

https://github.com/twigphp/Twig/security/advisories/GHSA-5mv2-rx3q-4w2v

reference_id

GHSA-5mv2-rx3q-4w2v

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

value	HIGH
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://github.com/twigphp/Twig/security/advisories/GHSA-5mv2-rx3q-4w2v

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO/

reference_id

I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I2PVV5DUTRUECTIHMTWRI5Z7DVNYQ2YO/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTN4273U4RHVIXED64T7DSMJ3VYTPRE7/

reference_id

OTN4273U4RHVIXED64T7DSMJ3VYTPRE7

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTN4273U4RHVIXED64T7DSMJ3VYTPRE7/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ/

reference_id

PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PECHIY2XLWUH2WLCNPDGNFMPHPRPCEDZ/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD/

reference_id

SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:56:43Z/

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD/

reference_url	https://usn.ubuntu.com/5947-1/
reference_id	USN-5947-1
reference_type
scores
url	https://usn.ubuntu.com/5947-1/

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	94
name	Improper Control of Generation of Code ('Code Injection')
description	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

cwe_id	74
name	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
description	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

cwe_id	77
name	Improper Neutralization of Special Elements used in a Command ('Command Injection')
description	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yypq-j9mx-6qa4

Vulnerability Instance