https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:19:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08237 bdu:2023-08237 https://cve.radiocsirt.org/vuln/bdu:2023-08237 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0930 certfr-2023-avi-0930 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0930 https://cve.radiocsirt.org/vuln/euvd-2026-216919 EUVD-2026-216919 https://cve.radiocsirt.org/vuln/euvd-2026-216919 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46734 <p>Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don&#39;t actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.</p> <p>Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don&#39;t actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-46734 https://cve.radiocsirt.org/vuln/ghsa-q847-2q57-wmr3 <p><strong>Affected:</strong> Packagist: symfony/twig-bridge, Packagist: symfony/symfony</p> <p>### Description</p> <p>Some Twig filters in CodeExtension use &#34;is_safe=html&#34; but don&#39;t actually ensure their input is safe.</p> <p>### Resolution</p> <p>Symfony now escapes the output of the affected filters.</p> <p>The patch for this issue is available [here](https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c) for branch 4.4.</p> <p>### Credits</p> <p>We would like to thank Pierre Rudloff for reporting the issue and to Nicolas Grekas for providing the fix.</p> <p><strong>Affected:</strong> Packagist: symfony/twig-bridge, Packagist: symfony/symfony</p> <p>### Description</p> <p>Some Twig filters in CodeExtension use &#34;is_safe=html&#34; but don&#39;t actually ensure their input is safe.</p> <p>### Resolution</p> <p>Symfony now escapes the output of the affected filters.</p> <p>The patch for this issue is available [here](https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c) for branch 4.4.</p> <p>### Credits</p> <p>We would like to thank Pierre Rudloff for reporting the issue and to Nicolas Grekas for providing the fix.</p> https://cve.radiocsirt.org/vuln/ghsa-q847-2q57-wmr3 https://cve.radiocsirt.org/vuln/gsd-2023-46734 gsd-2023-46734 https://cve.radiocsirt.org/vuln/gsd-2023-46734 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46734 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: symfony, Ubuntu:Pro:18.04:LTS: symfony, Ubuntu:Pro:20.04:LTS: symfony, Ubuntu:Pro:22.04:LTS: symfony</p> <p>Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don&#39;t actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: symfony, Ubuntu:Pro:18.04:LTS: symfony, Ubuntu:Pro:20.04:LTS: symfony, Ubuntu:Pro:22.04:LTS: symfony</p> <p>Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don&#39;t actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46734