


Affected versions
Twig >1.0.0,1.44.7 || >2.0.0,2.15.3 || >3.0.0,3.4.3 are affected by this security issue.
The issue has been fixed in Twig 1.44.7, 2.15.3 and 3.4.3.
Description
When using the filesystem loader to load templates for which the name is a user input, it is possible to use the source
or include
statement to read arbitrary files from outside the templates directory when using a namesp

This week, Symfony development activity focused on finishing and polishing some new features for the upcoming Symfony 6.2 version, such us: updating codebase to use modern PHP features like null coalescing assignment and match statements; adding



The SymfonyCon Disneyland Paris 2022 will start with 2 days of pre-conference workshops organized



Sentry, Twilio, JetBrains PhpStorm, SensioLabs, NetGen Layouts, Les-Tilleuls.coop, … and other fantastic partners will join us at our big next event: SymfonyCon Disneyland Paris 2022!
Want to support us? Are you looking for great Symfony developers?
Join us and become a sponsor of the Sy