Skip to content

Craft CMS has potential authenticated Remote Code Execution via Twig SSTI

Moderate severity GitHub Reviewed Published Mar 2, 2026 in craftcms/cms • Updated Mar 4, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts