| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-49981 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.27.0, the per-template ... |
| CVE-2026-48805 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.27.0, deprecated inter ... |
| CVE-2026-47732 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, several Twig lan ... |
| CVE-2026-46638 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% ... |
| CVE-2026-46637 | vulnerable | fixed | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, several filters ... |
| CVE-2026-46636 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | |
| CVE-2026-46635 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, the column filte ... |
| CVE-2026-46633 | vulnerable | fixed | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, Compiler::string ... |
| CVE-2026-46629 | vulnerable | fixed | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra ... |
| CVE-2026-46628 | vulnerable | fixed | fixed | fixed | fixed | Twig is a template language for PHP. Prior to 3.26.0, the deprecated s ... |
| CVE-2025-24374 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | fixed | Twig is a template language for PHP. When using the ?? operator, outpu ... |
| CVE-2024-51755 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | fixed | Twig is a template language for PHP. In a sandbox, an attacker can acc ... |
| Bug | Description |
|---|
| CVE-2026-48808 | Twig is a template language for PHP. Prior to 3.27.0, the column filte ... |
| CVE-2026-48807 | Twig is a template language for PHP. Prior to 3.27.0, the sandbox __to ... |
| CVE-2026-48806 | Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression ... |
| CVE-2026-47730 | Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Pro ... |
| CVE-2026-46640 | Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.( ... |
| CVE-2026-46639 | Twig is a template language for PHP. From 3.24.0 until 3.26.0, object- ... |
| CVE-2026-46634 | Twig is a template language for PHP. From 3.9.0 until 3.26.0, template ... |
| CVE-2026-24425 | Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass ... |
| CVE-2024-51754 | Twig is a template language for PHP. In a sandbox, an attacker can cal ... |
| CVE-2024-45411 | Twig is a template language for PHP. Under some circumstances, the san ... |
| CVE-2022-39261 | Twig is a template language for PHP. Versions 1.x prior to 1.44.7, 2.x ... |
| CVE-2022-23614 | Twig is an open source template language for PHP. When in a sandbox mo ... |