All vulnerabilities

Servers and applications

CVE-2026-115189

Twig Sandbox Escape in Theme Templates

Severity
High 8.8
Published
26 Oct 2026
Last changed
2 Nov 2026
Added to UpHeron
3 Nov 2026
Fixed in
5.2.12, 6.0.10, 7.2.2
Also known as
GHSA-h7pm-79gc-8867
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MauticServers and applications · github:mautic/mautic
  • From 1.3.0 before 5.2.12
  • From 6.0.0 before 6.0.10
  • From 7.0.0 before 7.2.2

References