add CVE-2024-45411 for Twig

FriendsOfPHP · Oct 10, 2024 · c4f501b · c4f501b
1 parent a4c1574
commit c4f501b
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/twig/twig/CVE-2024-45411.yaml b/twig/twig/CVE-2024-45411.yaml
@@ -0,0 +1,17 @@
+title:     Possible sandbox bypass
+link:      https://symfony.com/blog/twig-security-release-possible-sandbox-bypass
+cve:       CVE-2024-45411
+branches:
+    1.x:
+        time:     2024-09-09 08:51:06
+        versions: ['>=1.0.0', '<1.44.7']
+    2.x:
+        time:     2024-09-09 08:51:06
+        versions: ['>=2.0.0', '<2.16.0']
+    3.11:
+        time:     2024-09-09 08:51:06
+        versions: ['>=3.0.0', '<3.11.0']
+    3.x:
+        time:     2024-09-09 08:51:06
+        versions: ['>=3.12.0', '<3.14.0']
+reference: composer://twig/twig