Merge pull request #742 from xabbuh/CVE-2025-24374

add CVE-2025-24374 for Twig
FriendsOfPHP · Jan 30, 2025 · 41de5c3 · 41de5c3
2 parents 06ef6b1 + cd03f9a
commit 41de5c3
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/twig/twig/CVE-2025-24374.yaml b/twig/twig/CVE-2025-24374.yaml
@@ -0,0 +1,8 @@
+title:     Missing output escaping for the null coalesce operator
+link:      https://symfony.com/blog/twig-cve-2025-24374-missing-output-escaping-for-the-null-coalesce-operator
+cve:       CVE-2025-24374
+branches:
+    3.x:
+        time:     2025-01-29 06:52:00
+        versions: ['>=3.16.0', '<3.19.0']
+reference: composer://twig/twig