Executive brief
Twig security issue where escaping was missing when using null coalesce operator
Affected products
- Packagist twig/twig
Junglewise Threat Intelligence
CVE-2025-24374: Twig security issue where escaping was missing when using null coalesce operator
CVE-2025-24374 · Severity: low · CVSS 3.1 · Published 2025-01-29
Technologies: twig/twig (Packagist). Vendors: Packagist.