Skip to content

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

Moderate severity GitHub Reviewed Published May 27, 2026 in twigphp/Twig • Updated Jun 30, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts