OSV security advisory
Security advisory for CVE-2026-24425 in twig/twig - Patched by Root
ROOT-APP-COMPOSER-CVE-2026-24425
Full advisory details, affected packages, severity context, and original source.
Affected technology
CVE-2026-24425 in twig/twig - Patched by RootPHP ecosystem
Advisory overview
Root has patched CVE-2026-24425 in the twig/twig package for Root:Composer. Multiple fixed versions available.
Affected packages and releases
Root:Composer / twig/twig
introduced: 0 · fixed: v3.11.3-p12007002+root.io · fixed: v3.11.3-p12007003+root.io · fixed: v3.11.3-p12007004+root.io
