https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:50:18.950271+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-47139 EUVD-2026-47139 2026-10-04T20:50:18.953296+00:00 EUVD-2026-47139 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28925 fkie_cve-2020-28925 2026-10-04T20:50:18.953329+00:00

Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.

 https://cve.radiocsirt.org/vuln/ghsa-w8cj-mvf9-mpc9 GHSA-w8cj-mvf9-mpc9 — OS Command injection in Bolt 2026-10-04T20:50:18.953361+00:00

Affected: Packagist: bolt/bolt

Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.

 https://cve.radiocsirt.org/vuln/gsd-2020-28925 gsd-2020-28925 2026-10-04T20:50:18.953385+00:00 gsd-2020-28925 https://cve.radiocsirt.org/vuln/msrc_cve-2020-28925 msrc_CVE-2020-28925 — Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with… 2026-10-04T20:50:18.953420+00:00 msrc_CVE-2020-28925