https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:02:38.240710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-103164 EUVD-2026-103164 2026-10-04T15:02:38.342544+00:00 EUVD-2026-103164 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8350 fkie_cve-2014-8350 2026-10-04T15:02:38.342582+00:00

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

 https://cve.radiocsirt.org/vuln/ghsa-2pmx-6mm6-6v72 GHSA-2pmx-6mm6-6v72 — Smarty arbitrary PHP code execution 2026-10-04T15:02:38.342615+00:00

Affected: Packagist: smarty/smarty

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

 https://cve.radiocsirt.org/vuln/gsd-2014-8350 gsd-2014-8350 2026-10-04T15:02:38.342641+00:00 gsd-2014-8350 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8350 Withdrawn: UBUNTU-CVE-2014-8350 2026-10-04T15:02:38.342655+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: smarty3

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.