Sandbox `__toString()` policy bypass via `Traversable` in `join`/`replace` filters and via the `in`/`not in` operators
May 27, 2026
#Twig
Sandbox `__toString()` policy bypass via dynamic mapping keys
May 27, 2026
#Twig
Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`
May 27, 2026
#Twig
Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
May 27, 2026
#Twig
CVE-2026-47732 Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
May 20, 2026
#Twig
XSS in profiler HtmlDumper via unescaped template and profile names
May 20, 2026
#Twig
Arbitrary PHP code execution via `_self.(
May 20, 2026
#Twig
Sandbox property and method bypass via object-destructuring assignment
May 20, 2026
#Twig
`{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)
May 20, 2026
#Twig