Search for packages
| purl | pkg:composer/twig/twig@3.19.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-272f-nexb-tqe8 | Twig security issue where escaping was missing when using null coalesce operator When using the `??` operator, output escaping was missing for the expression on the left side of the operator. |
CVE-2025-24374
GHSA-3xg3-cgvq-2xwr |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T12:12:24.650434+00:00 | GithubOSV Importer | Fixing | VCID-272f-nexb-tqe8 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/01/GHSA-3xg3-cgvq-2xwr/GHSA-3xg3-cgvq-2xwr.json | 36.1.3 |