All Topics
All Topics
Technology
Technology
AI
AI
Business
Business
Entertainment
Entertainment
News
News
Programming
Programming
Science
Science
Design
Design
Environment
Environment
Finance
Finance
Crypto
Crypto
Politics
Politics
Sports
Sports
Education
Education
Gaming
Gaming
Art
Art
Music
Music
Health
Health
Security
Security
Books
Books
Food
Food
Travel
Travel
Personal
Personal
Bluesky
Twitter

CVE-2026-46629: CWE-770: Allocation of Resources Without Limits or Throttling in twigphp Twig

Twig prior to version 3.26.0 contains a vulnerability where IntlDateFormatter and NumberFormatter instances are memoized without limits based on template-controlled arguments. This can lead to…

Read the full article
2d agoen
technologycybersecuritymedium

You might also wanna read

Critical PHP Injection Vulnerability Patched in Twig Template Engine

A critical vulnerability in Twig versions prior to 3.26.0 allows attackers to inject arbitrary PHP code via crafted template names in {% use

Xploitwire·2h ago

Comments

Sign in to join the conversation.

No comments yet. Be the first.