Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-xv9e-a7qq-63a1
|
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
### Description
Some Twig filters in CodeExtension use "is_safe=html" but don't actually ensure their input is safe.
### Resolution
Symfony now escapes the output of the affected filters.
The patch for this issue is available [here](https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c) for branch 4.4.
### Credits
We would like to thank Pierre Rudloff for reporting the issue and to Nicolas Grekas for providing the fix.
|
CVE-2023-46734
GHSA-q847-2q57-wmr3
|