PKSA-g9zw-qxh8-pq8w Security Advisory
-
Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`
PKSA-g9zw-qxh8-pq8w CVE-2026-48805
Affected package: twig/twig
Affected version: >=1.0.0,<2.0.0|>=2.0.0,<3.0.0|>=3.0.0,<3.27.0
Reported by:
FriendsOfPHP/security-advisories