Threats tagged 'ghsa-7p85-w9px-jpjp'

A critical PHP code injection vulnerability exists in Twig versions >=1.15.1 and <3.26.0 via the `{% use %}` template tag. The issue arises because single quotes in template names are not escaped properly, allowing injection of arbitrary PHP code into compiled cache files. This code executes with the PHP process, bypassing Twig's sandbox and enabling remote code execution. The vulnerability is fixed in version 3.26.0 by escaping single quotes in template names.