https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:50:31.583081+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02201 bdu:2022-02201 2026-10-04T03:50:31.653261+00:00 bdu:2022-02201 https://cve.radiocsirt.org/vuln/cnvd-2021-13246 cnvd-2021-13246 2026-10-04T03:50:31.653298+00:00 cnvd-2021-13246 https://cve.radiocsirt.org/vuln/euvd-2026-24998 EUVD-2026-24998 2026-10-04T03:50:31.653314+00:00 EUVD-2026-24998 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26119 fkie_cve-2021-26119 2026-10-04T03:50:31.653326+00:00

Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.

 https://cve.radiocsirt.org/vuln/ghsa-w5hr-jm4j-9jvq GHSA-w5hr-jm4j-9jvq — Sandbox escape through template_object in smarty 2026-10-04T03:50:31.653353+00:00

Affected: Packagist: smarty/smarty

Sandbox protection could be bypassed through access to an internal Smarty object that should have been blocked. Sites that rely on [Smarty Security features](https://www.smarty.net/docs/en/advanced.features.tpl) should upgrade as soon as possible. Please upgrade to 3.1.39 or higher.

 https://cve.radiocsirt.org/vuln/gsd-2021-26119 gsd-2021-26119 2026-10-04T03:50:31.653378+00:00 gsd-2021-26119 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26119 UBUNTU-CVE-2021-26119 2026-10-04T03:50:31.653389+00:00

Affected: Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: smarty3

Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.