Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-24374
4.3
MEDIUMCVSS v3
Published
January 29, 2025
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0.
GitHub