From 09313e2e908ac1fe85a1d6f04e6228d2af56d0f1 Mon Sep 17 00:00:00 2001 From: Henrique Cabral Date: Wed, 29 Jan 2025 20:44:49 -0300 Subject: [PATCH] Making it more wider --- input/new.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/input/new.json b/input/new.json index fb26478..d9e1a4b 100644 --- a/input/new.json +++ b/input/new.json @@ -5,7 +5,7 @@ ["3.17.0" "3.18.0"] ], "cwe": ["CWE-20"], - "tldr": "Affected versions of this package are affected by a design flaw that arises from inadequate input validation, specifically relating to the improper handling of escaping and null values when processing dynamic inputs in conjunction with the `??` operator. This vulnerability exposes the system to potential exploitation by malicious actors, who may leverage the weaknesses to execute Cross-site Scripting (XSS) attacks.", + "tldr": "Affected versions of this package are affected by a design flaw that arises from inadequate input validation, specifically relating to the improper handling of escaping and null values when processing dynamic inputs in conjunction with the `??` operator. This vulnerability exposes the system to potential exploitation by malicious actors, who may leverage the weaknesses to execute injection attacks.", "doest_this_affect_me": "You are affected if you are using a version that falls within the vulnerable range.", "how_to_fix": "Upgrade the `twig/twig` library to the patch version.", "vulnerable_to": "Improper Input Validation",