Skip to content

Product

cakephp twig-view vulnerabilities

2 published CVES affecting cakephp twig-view, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest cakephp twig-view CVEs

Newest publication first

  1. CVE-2026-59191 TwigView: FileLoader is vulnerable to arbitrary file read

    Published
    MediumCVSS 6.9 EPSS 0.48%

    TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, if FileLoader::findTemplate() is supplied un-validated user controlled data, arbitrary files...

  2. CVE-2026-59192 TwigView: Deserialization of Untrusted Data

    Published
    MediumCVSS 6.9 EPSS 0.61%

    TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions and jasny/twig-extensions helpers. Prior to versions 1.3.3 and 2.1.2, the unserialize filter has no restriction on which classes are allowed. This can used as a d...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.