| Release | Version |
|---|---|
| stretch | 1.24.0-2+deb9u1 |
| buster | 2.6.2-2 |
| Bug | stretch | buster | Description |
|---|---|---|---|
| CVE-2018-13818 | vulnerable | fixed | ** DISPUTED ** Twig before 2.4.4 allows Server-Side Template Injection ... |
| Bug | Description |
|---|---|
| CVE-2019-9942 | A sandbox information disclosure exists in Twig before 1.38.0 and 2.x ... |
| CVE-2015-7809 | The displayBlock function Template.php in Sensio Labs Twig before 1.20 ... |
| DSA / DLA | Description |
|---|---|
| DSA-4419-1 | twig - security update |
| DSA-3343-1 | twig - security update |