Search for packages
| purl | pkg:composer/smarty/smarty@4.3.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-a3yk-8fmf-x7fw
Aliases: CVE-2024-35226 GHSA-4rmg-292m-wg3w |
Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag Template authors could inject php code by choosing a malicous file name for an extends-tag. Users that cannot fully trust template authors should update asap. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3xs3-13we-6ffu | Code Injection Smarty 3 is vulnerable to a PHP code injection when calling `fetch()` or `display()` functions on custom resources that does not sanitize template name. |
CVE-2017-1000480
GHSA-9m49-vhwv-422g |
| VCID-jhg5-tdyz-uyh4 | Improper Input Validation Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. A vulnerability was found that may allow template authors could run restricted static php methods. |
CVE-2021-21408
GHSA-4h9c-v5vg-5m6m |
| VCID-vnb9-5w8q-r3bd | Path Traversal Smarty allows attackers to bypass the `trusted_dir` protection mechanism via a `/../` substring in an `include` statement. |
CVE-2018-16831
GHSA-65j5-vpm7-6xp4 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-06T04:59:58.326425+00:00 | GitLab Importer | Affected by | VCID-a3yk-8fmf-x7fw | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/smarty/smarty/CVE-2024-35226.yml | 38.6.0 |
| 2026-06-06T01:16:58.691922+00:00 | GitLab Importer | Fixing | VCID-jhg5-tdyz-uyh4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/smarty/smarty/CVE-2021-21408.yml | 38.6.0 |
| 2026-06-04T20:14:39.530083+00:00 | GitLab Importer | Fixing | VCID-vnb9-5w8q-r3bd | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/smarty/smarty/CVE-2018-16831.yml | 38.6.0 |
| 2026-06-04T20:10:39.193776+00:00 | GitLab Importer | Fixing | VCID-3xs3-13we-6ffu | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/smarty/smarty/CVE-2017-1000480.yml | 38.6.0 |