symfony twig

Name: symfony twig
Brand: symfony

productUS

cpe:2.3:a:symfony:twig:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

8critical7high9medium1low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23614US	critical9.8	8.21% (95th)	Exploit	3.3.8	2022-02-04	2 versions
CVE-2018-13818US	critical9.8	6.90% (94th)	—	2.4.4	2018-07-10	< 2.4.4
CVE-2015-7809US	medium6.8	3.40% (89th)	—	no fix	2015-11-06	≤ 1.19.0
CVE-2022-39261US	high7.5	3.17% (88th)	—	1.44.7	2022-09-28	3 versions
CVE-2019-9942US	low3.7	1.41% (72nd)	—	2.7.0	2019-03-23	2 versions
CVE-2001-1537US	high7.5OT elevated	1.11% (66th)	—	no fix	2001-12-31	≤ 2.7.4
CVE-2024-45411US	high8.6	0.85% (58th)	—	3.14.0	2024-09-09	3 versions
CVE-2026-24425US	critical9.9	0.76% (55th)	—	3.26.0	2026-05-20	2 versions
CVE-2026-46633US	critical9.8	0.69% (53rd)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-46640US	high8.8	0.64% (51st)	—	3.26.0	2026-07-14	3.15.0 → 3.26.0
CVE-2026-46634US	critical9.8	0.62% (49th)	—	3.26.0	2026-07-14	3.9.0 → 3.26.0
CVE-2026-46629US	medium6.5	0.54% (45th)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-46627US	medium6.5	0.54% (45th)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-48805US	critical9.1	0.48% (42nd)	—	3.27.0	2026-07-14	< 3.27.0
CVE-2026-46638US	high8.1	0.47% (41st)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-48806US	critical9.1OT elevated	0.42% (36th)	—	3.27.0	2026-07-14	< 3.27.0
CVE-2026-48808US	high7.5OT elevated	0.41% (35th)	—	3.27.0	2026-07-14	< 3.27.0
CVE-2026-47732US	medium6.5OT elevated	0.40% (34th)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-46639US	medium6.5	0.39% (34th)	—	3.26.0	2026-07-14	3.24.0 → 3.26.0
CVE-2026-48807US	critical9.1OT elevated	0.37% (30th)	—	3.27.0	2026-07-14	< 3.27.0
CVE-2026-49981US	high8.2OT elevated	0.36% (30th)	—	3.27.0	2026-07-14	< 3.27.0
CVE-2026-46635US	medium4.3OT elevated	0.33% (26th)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-46637US	medium5.4	0.30% (23rd)	—	3.26.0	2026-07-14	< 3.26.0
CVE-2026-47730US	medium5.4	0.29% (22nd)	—	3.26.0	2026-07-14	3.0.0 → 3.26.0
CVE-2026-46628US	medium5.4	0.29% (22nd)	—	3.26.0	2026-07-14	< 3.26.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-693Protection Mechanism Failure10 CVEs
CWE-863Incorrect Authorization6 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan