CVE catalog

CVE-2022-23614

php-twig: CVE-2022-23614

Severity: Medium
Published: Feb 4, 2022, 11:15:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 8.21% · Oct 22, 2026

Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced and could lead to code injection of arbitrary PHP code. Patched versions now disallow calling non Closure in the `sort` filter as is the case for some other filters. Users are advised to upgrade.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	php-twig	sid	`3.28.0-1`	fixed
Debian	php-twig	forky	`3.28.0-1`	fixed
Debian	php-twig	trixie	`3.27.0-0+deb13u1`	fixed
Debian	php-twig	trixie-security	`3.27.0-0+deb13u1`	fixed
Debian	php-twig	bookworm	`3.5.1-1+deb12u3`	fixed
Debian	php-twig	bookworm-security	`3.5.1-1+deb12u3`	fixed
Ubuntu	twig	pro	`1.24.0-2ubuntu1`	vulnerable
Ubuntu	twig	pro	`2.4.4-2ubuntu1`	vulnerable
Ubuntu	twig	pro	`2.4.6-1`	vulnerable
Ubuntu	twig	pro	`2.4.6-1ubuntu0.1~esm1`	fixed
Ubuntu	php-twig	pro	`3.3.2-1ubuntu3`	vulnerable
Ubuntu	php-twig	pro	`3.3.4-1`	vulnerable
Ubuntu	php-twig	pro	`3.3.6-1`	vulnerable
Ubuntu	php-twig	pro	`3.3.7-1`	vulnerable
Ubuntu	php-twig	pro	`3.3.8-2ubuntu4`	vulnerable
Ubuntu	php-twig	pro	`3.3.8-2ubuntu4+esm1`	fixed
Ubuntu	php-twig	pro	`2.11.3-2`	vulnerable
Ubuntu	php-twig	pro	`2.12.1-1`	vulnerable
Ubuntu	php-twig	pro	`2.12.2-1`	vulnerable
Ubuntu	php-twig	pro	`2.12.3-1`	vulnerable
Ubuntu	php-twig	pro	`2.12.5-1`	vulnerable
Ubuntu	php-twig	pro	`2.12.5-1ubuntu0.1~esm1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	php-twig	source	sid	`3.3.8-1`	not yet assigned	Not reported	Not reported
Debian	php-twig	source	forky	`3.3.8-1`	not yet assigned	Not reported	Not reported
Debian	php-twig	source	trixie	`3.3.8-1`	not yet assigned	Not reported	Not reported
Debian	php-twig	source	bookworm	`3.3.8-1`	not yet assigned	Not reported	Not reported
Ubuntu	twig	deb	pro	`2.4.6-1ubuntu0.1~esm1`	Not reported	USN-5947-1	Not reported
Ubuntu	php-twig	deb	pro	`3.3.8-2ubuntu4+esm1`	Not reported	USN-5947-1	Not reported
Ubuntu	php-twig	deb	pro	`2.12.5-1ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2022-23614	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[php-twig]Fixed
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-cache-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-cssinliner-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-doc]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-extra-bundle]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-html-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-inky-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-intl-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-markdown-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
[php-twig-string-extra]Fixed
Source package: [php-twig]
Details (4)
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm
- 3.5.1-1+deb12u3 · all · bookworm-security
  Fixed · Fixed: 3.3.8-1
  dsa · php-twig · debian · bookworm

Observed: Oct 23, 2026, 6:24:41 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]