Nette - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2022-01-04.

Products

• Latte - 2 CVEs
• Application - 1 CVEs

Newest CVEs of Nette

• CVE-2022-21648 - CVSS 8.2 (high), 2022-01-04: Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a…
• CVE-2021-23803 - CVSS 9.8 (critical), 2021-12-17: This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the…
• CVE-2020-15227 - CVSS 9.8 (critical), 2020-10-01: Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL…