Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,234All CVEsplus 19,120 rejected
- 500Last 24 hours2,800 in the last 7 days
- 16,901Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 10 | 9 | 0 | 0 | 19 | 25 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 6 |
| 2024 | 0 | 1 | 0 | 2 | 0 | 3 | 5 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2022 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-46636 | Twig: Sandbox method allowlist bypass via `Markup` subclasstwigphp · Twig | High8.7 |
| CVE-2026-48807 | Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filterstwigphp · Twig | High7.1 |
| CVE-2026-48806 | Twig: Sandbox `__toString()` policy bypass via dynamic mapping keystwigphp · Twig | High7.1 |
| CVE-2026-48808 | Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`twigphp · Twig | Medium6.0 |
| CVE-2026-48805 | Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`twigphp · Twig | Medium5.3 |
| CVE-2026-49981 | Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`twigphp · Twig | Medium6.0 |
| CVE-2026-46637 | Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`twigphp · Twig | Medium5.1 |
| CVE-2026-46638 | Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)twigphp · Twig | Medium6.0 |
| CVE-2026-46640 | Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilationtwigphp · Twig | High8.7 |
| CVE-2026-46629 | Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled argumentstwigphp · Twig | Medium5.3 |
| CVE-2026-47730 | Twig: XSS in profiler HtmlDumper via unescaped template and profile namestwigphp · Twig | Medium5.1 |
| CVE-2026-46628 | Twig: The `spaceless` filter implicitly marks its output as safetwigphp · Twig | Medium5.1 |
| CVE-2026-46634 | Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template nametwigphp · Twig | High7.7 |
| CVE-2026-46627 | Twig: Sandbox resource exhaustion via unbounded `for` / `range()`twigphp · Twig | High7.1 |
| CVE-2026-46633 | Twig: PHP code injection via `{% use %}` template nametwigphp · Twig | High8.7 |
| CVE-2026-46639 | Twig: Sandbox property and method bypass via object-destructuring assignmenttwigphp · Twig | High7.1 |
| CVE-2026-46635 | Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)twigphp · Twig | Medium5.3 |
| CVE-2026-47732 | Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion pointstwigphp · Twig | High7.1 |
| CVE-2026-24425 | Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterfacetwigphp · Twig | High8.7 |
| CVE-2025-24374 | Twig fixes a security issue where escaping was missing when using null coalesce operator (??)twigphp · Twig | Medium4.3 |
| CVE-2024-51754 | Unguarded calls to __toString() when nesting an object into an array in Twigtwigphp · Twig | Low2.2 |
| CVE-2024-51755 | Unguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twigtwigphp · Twig | Low2.2 |
| CVE-2024-45411 | Twig has a possible sandbox bypasstwigphp · Twig | High8.6 |
| CVE-2022-39261 | Twig may load a template outside a configured directory when using the filesystem loadertwigphp · Twig | High7.5 |
| CVE-2022-23614 | Code injection in Twigtwigphp · Twig | High8.8 |