Nette Latte
2 CVEs affecting Nette Latte. Latest disclosed: 2022-01-04. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23803 | Critical | 9.8 | 2021-12-17 | This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template… |
CVE-2022-21648 | High | 8.2 | 2022-01-04 | Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a s… |