https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:52:39.647873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-02508 cnvd-2018-02508 2026-10-03T21:52:39.654447+00:00 cnvd-2018-02508 https://cve.radiocsirt.org/vuln/euvd-2026-80910 EUVD-2026-80910 2026-10-03T21:52:39.654484+00:00 EUVD-2026-80910 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000480 fkie_cve-2017-1000480 2026-10-03T21:52:39.654506+00:00

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.

 https://cve.radiocsirt.org/vuln/ghsa-9m49-vhwv-422g GHSA-9m49-vhwv-422g — Smarty PHP code injection 2026-10-03T21:52:39.654544+00:00

Affected: Packagist: smarty/smarty

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000480 gsd-2017-1000480 2026-10-03T21:52:39.654578+00:00 gsd-2017-1000480 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1000480 UBUNTU-CVE-2017-1000480 2026-10-03T21:52:39.654597+00:00

Affected: Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.