https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:14:01.777647+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234532 EUVD-2026-234532 2026-10-04T13:14:01.874627+00:00 EUVD-2026-234532 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21408 fkie_cve-2021-21408 2026-10-04T13:14:01.874660+00:00

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch.

 https://cve.radiocsirt.org/vuln/ghsa-4h9c-v5vg-5m6m GHSA-4h9c-v5vg-5m6m — Access to restricted PHP code by dynamic static class access in smarty 2026-10-04T13:14:01.874692+00:00

Affected: Packagist: smarty/smarty

### Impact Template authors could run restricted static php methods.

### Patches Please upgrade to 3.1.40 or higher.

### References See the [documentation on Smarty security features](https://www.smarty.net/docs/en/advanced.features.tpl#advanced.features.security) on the static_classes access filter.

### For more information If you have any questions or comments about this advisory please open an issue in [the Smarty repo](https://github.com/smarty-php/smarty)

 https://cve.radiocsirt.org/vuln/gsd-2021-21408 gsd-2021-21408 2026-10-04T13:14:01.874723+00:00 gsd-2021-21408 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21408 UBUNTU-CVE-2021-21408 2026-10-04T13:14:01.874736+00:00

Affected: Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: smarty3, Ubuntu:22.04:LTS: smarty3

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.43 and 4.0.3, template authors could run restricted static php methods. Users should upgrade to version 3.1.43 or 4.0.3 to receive a patch.