| Release | Version |
|---|---|
| bullseye | 2.14.3-1+deb11u2 |
| bullseye (security) | 2.14.3-1+deb11u4 |
| bookworm | 3.5.1-1+deb12u1 |
| bookworm (security) | 3.5.1-1+deb12u3 |
| trixie | 3.20.0-2 |
| trixie (security) | 3.27.0-0+deb13u1 |
| forky | 3.27.1-1 |
| sid | 3.27.1-1 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2026-48805 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | |
| CVE-2026-47732 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | |
| CVE-2026-46638 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | |
| CVE-2026-46637 | vulnerable | fixed | fixed | fixed | fixed | |
| CVE-2026-46636 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | |
| CVE-2026-46635 | vulnerable | vulnerable (no DSA, ignored) | fixed | fixed | fixed | |
| CVE-2026-46633 | vulnerable | fixed | fixed | fixed | fixed | |
| CVE-2026-46629 | vulnerable | fixed | fixed | fixed | fixed | |
| CVE-2026-46628 | vulnerable | fixed | fixed | fixed | fixed | |
| CVE-2025-24374 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | fixed | Twig is a template language for PHP. When using the ?? operator, outpu ... |
| CVE-2024-51755 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | fixed | Twig is a template language for PHP. In a sandbox, an attacker can acc ... |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2026-46627 | vulnerable | vulnerable | fixed | fixed | fixed |
| Bug | Description |
|---|---|
| CVE-2026-48808 | |
| CVE-2026-48807 | |
| CVE-2026-48806 | |
| CVE-2026-47730 | |
| CVE-2026-46640 | |
| CVE-2026-46639 | |
| CVE-2026-46634 | |
| CVE-2026-24425 | Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass ... |
| CVE-2024-51754 | Twig is a template language for PHP. In a sandbox, an attacker can cal ... |
| CVE-2024-45411 | Twig is a template language for PHP. Under some circumstances, the san ... |
| CVE-2022-39261 | Twig is a template language for PHP. Versions 1.x prior to 1.44.7, 2.x ... |
| CVE-2022-23614 | Twig is an open source template language for PHP. When in a sandbox mo ... |
| DSA / DLA | Description |
|---|---|
| DSA-6320-1 | php-twig - security update |
| DSA-6311-1 | php-twig - security update |
| DLA-4186-1 | php-twig - security update |
| DSA-5771-1 | php-twig - security update |
| DLA-3888-1 | php-twig - security update |
| DSA-5248-1 | php-twig - security update |
| DSA-5107-1 | php-twig - security update |