CVE-2026-46629 in Twig
요약
\~에 의해 MITRE • 2026. 07. 15.
Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter instances in arrays keyed by template-controlled filter arguments such as locale, pattern, and attrs, allowing a template to allocate many ICU formatter objects that remain pinned for the lifetime of the Twig\Environment. This issue is fixed in version 3.26.0.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.